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BEA  Unifies  Its  Software 
Development  Environment 


Upgraded  version  of  WebLogic  suite  converges 
integration  and  building  of  homegrown  apps 


BY  CAROL  SLiWA 

To  kick  off  its  annual  eWorld 
conference,  BEA  Systems  Inc. 
today  will  unveil  beta  versions 
of  its  new  suite  of  WebLogic 
software  products,  including 
its  application  server,  enter¬ 
prise  portal  and  integration 
broker  technologies. 

But  analysts  pre¬ 
dicted  that  compa¬ 
nies  will  be  most  in¬ 
terested  in  the  suite’s 
upgraded  WebLogic 
Workshop,  since  the 
new  tool  provides  a 
unified  interface  for 
developing  to  any  of 


the  WebLogic  products. 

“That’s  the  right  direction,” 
said  Bob  Carasik,  enterprise  ar¬ 
chitect  at  the  IT  arm  of  Wells 
Fargo  &  Co.  in  San  Francisco. 
“We’re  glad  to  see  they’re 
adding  new  layers  of  function¬ 
ality  on  top  of  the  application 
server.  They  have  to  move  up 
the  stack,  because 
application  servers 
are  going  to  become 
a  commodity.” 

The  first  version 
of  WebLogic  Work¬ 
shop,  which  shipped 
last  year,  was  re¬ 
stricted  to  building 


Web  services.  The  new  ver¬ 
sion  has  been  extended  to  let 
developers  build  custom  ap¬ 
plications,  create  portals,  inte¬ 
grate  applications  and  manage 
business  processes  and  trad¬ 
ing  partners,  said  Chet  Ka¬ 
poor,  vice  president  and  gen¬ 
eral  manager  of  San  Jose- 
based  BEA’s  integration  group. 

WebLogic  Workshop  has 
also  been  expanded  with  more 
controls  to  remove  the  com¬ 
plexity  of  building  applica¬ 
tions  that  rely  on  Java  2  Enter¬ 
prise  Edition  technologies, 
Kapoor  added. 

“This  is  a  very  substantial 
piece  of  work,”  said  John  Ry- 
mer,  an  analyst  at  Cambridge, 
BEA,  page  49 


IBM's  announcement 
of  enhancements  to  its 
WebSphere  Business 
Integration  software 
coincides  with  the 
BEA  event.  Page  6 


CRM  Analytics  Starts  to  Pay  Off  for  Users 


Siebel,  other  vendors 
put  priority  on  built-in 
tools  after  slow  start 


BY  MARC  L.  SONGINI 

The  use  of  analytical  custom¬ 
er  relationship  management 
software  is  still  in  its  infancy. 
But  some  companies  that  have 
been  willing  to  give  the  tech¬ 
nology  a  shot  say  their  invest¬ 
ments  are  paying  off. 

For  example,  Honeywell 


Aerospace  is  already  seeing  a 
return  on  its  investment  in  the 
analytical  CRM  applications  it 
installed  three  months  ago  to 
help  its  sales  force  manage 
customer  accounts,  said  Dar¬ 
ryl  Carroll,  director  of  sales 
and  marketing  processes  at 
the  Honeywell  International 
Inc.  subsidiary. 

Phoenix-based  Honeywell 
Aerospace,  which  makes  air¬ 
craft  parts,  is  using  Siebel  Sys¬ 
tems  Inc.’s  CRM  tools.  Sales 


personnel  can  now  use  a  dash¬ 
board  interface  to  look  at  cus¬ 
tomer  data  across  the  compa¬ 
ny’s  various  business  units  to 
identify  selling  opportunities 
and  proactively  address  po¬ 
tential  problems,  such  as  is¬ 
sues  related  to  specific  parts, 
he  said. 

Carroll  declined  to  disclose 
how  much  the  software  cost, 
but  he  said  Honeywell  Aero¬ 
space  has  already  recouped  its 
investment  through  produc¬ 
tivity  gains.  Previously,  the 
company’s  sales  force  had  to 

CRM  Analytics,  page  12 


CRM  ANALYTICS 
INACTION _ 

To  learn  about  how  Honeywel 
Aerospace's  analytical  CRM 
system  works,  see  page  12. 
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Choosing  a  strategic  vendor  is  far  from  elementary. 

It’s  a  long-term  commitment  that  involves  a  lot  more  than  the 
technology  you  buy.  Before  you  tie  your  company’s  fortunes  to 
those  of  a  supplier,  it’s  critical  to  investigate  thoroughly  and  learn 
as  much  as  you  can  about  your  would-be  partner’s  financial  histo¬ 
ry  and  prospects.  We  offer  10  ways  to  assess  the  financial  health 
of  IT  vendors.  SEE  PAGE  35. 


IBM  Defends  Pricing  Model 


Plans  to  keep,  improve 
mainframe  Workload 
License  Charge 

BY  JAIKUMAR  VIJAYAN 

IBM  remains  fully  committed 
to  its  Workload  License  Charge 
mainframe  software  pricing 
model  and  will  continue  to  try 
to  make  it  easier  for  users  to 
implement  it.  That  was  the 
message  delivered  by  an  IBM 
executive  at  the  Share  large- 
systems  user  conference  in 
Dallas  last  week. 


IBM  announced  WLC  in 
October  2000  along  with  its 
64-bit  zSeries  mainframes. 
Under  the  pricing  model,  IBM 
z/OS  users  pay  for  software 
based  on  the  average  size  of 
their  workloads  and  not  on 
the  overall  system  capacity. 

Despite  the  promised  bene¬ 
fits,  users  have  complained 
that  WLC  is  hard  to  imple¬ 
ment  and  understand  [Quick- 
Link  32381],  IBM  itself  has  ac¬ 
knowledged  that  the  model 
isn’t  for  everyone  and  requires 
IBM,  page  49 
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WHY  NOT  SEND  YOUR  CIO 
TO  I.T.  FANTASY  CAMP? 


EVALUATE 


BRAINSTORM 


PROTOTYPE  &TEST 


IMPLEMENT 


i  Force*  Solution  Centers  let  you  test  your 
dream  solution  before  you  fully  invest. 

Why  spend  countless  hours  and  dollars  prototyping  and  testing 
a  new  solution  in  your  own  data  center?  Why  take  chances 
deploying  that  new  solution  without  knowing  for  sure  that  it 
works?  Instead  of  taking  on  the  risk,  the  worry  and  the  costs 
yourself,  why  not  bring  your  next  technology  initiative  to  an 
iForce5"  Solution  Center? 

The  global  network  of  iForce  Centers,  operated  by  Sun  and 
world-class  partners  like  CSC,  Fujitsu,  Avnet,Tech  Access, 
Sierra  Systems  and  EDS,  is  the  ideal  place  to  create  and  test 
your  next  business  solution.  A  place  where  you  can  brainstorm 
solutions  with  some  of  the  best  minds  in  the  business. 


Bring  in  your  best  ideas.  Your  most  ambitious,  competitive 
initiatives.  Even  your  problems.  And  let  best-of-breed 
software  companies  like  i2 Technologies,  Manugistics  and 
SAP  collaborate  to  design,  test  and  benchmark  your  solution 
on  the  exact  hardware  and  software  configurations  it  will 
ultimately  be  deployed  on. 


So  whether  you're  in  financial  services,  manufacturing  or 
retail,  you  can  leave  the  iForce  Center  with  a  battle-tested 
prototype  that's  proven  to  work  in  real-world  conditions,  in 
your  own  data  center.  Before  you  pay  for  the  final  product. 


The  bottom  line?  You  get  to  invent  solutions  that  move  your 
business  forward  with  significantly  lower  cost  and  risk. 
Which  is  a  fantasy  come  true  for  any  IT  professional. 


Learn  more  about  iForce  and  browse  our  online  directory  of 
industry-specific  solutions.  Visit  SUN.COM/WHYNOT 


A 


microsystems 


We  make  the  net  work. 


©2003  Sun  Microsystems,  Inc.  All  rights  reserved.  Sun,  Sun  Microsystems,  the  Sun  logo  and  iForce  are  trademarks  or  registered  trademarks  of 

Sun  Microsystems,  Inc.  in  the  United  States  and  other  countries. 


Can  your  antivirus  software  provide  double  the  scanning  power?  Ours  can. 

Making  sure  your  company  is  secure  gets  more  and  more  difficult  every  day.  That's  why  eTrust™  Antivirus  v7 
from  Computer  Associates  uses  dual  scanning  engines  to  ensure  comprehensive  virus  protection.  It  processes 
data  in  real  time  to  search  out  and  eliminate  viruses,  and  it  also  scans  files  during  prescheduled  and 
off-peak  hours.  All  at  the  cost  of  most  single-engine  AV  products.  It's  more  than  just  twice  the  protection. 
It's  twice  the  peace  of  mind.  ca.com/etrust/antivirus 


eTrust™  Antivirus 


Computer  Associates® 


©2003  Computer  Associates  International,  Inc.  (CA).  All  rights  reserved.  eTrust”  Antivirus  was  formerly  known  as  eTrust”  lnoculate/7? 
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Trades  at  Top  Speed 


In  the  Technology  section:  straight-through 
processing  systems  could  save  financial  ser¬ 
vices  companies  billions  of  dollars.  But  inte¬ 
grating  trade-matching  systems  requires 
both  automating  manual  processes  and  cre¬ 
ating  a  complex  middleware  layer.  Page  21 


NEWS 


TECHNOLOGY 


OPINION 


Drawing  a  Crowd 

In  the  Management  section:  Too  many  companies 
get  caught  up  in  the  hoopla  surrounding  portal  tech¬ 
nology,  focusing  mostly  on  implementation  and  in¬ 
tegration  issues.  Here’s  how  to  bring  the  focus  back 
to  usability.  Page  38 
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6  IBM  aims  to  ease  business- 
process  integration  with  new 
WebSphere  tools. 

7  Navy  gets  OK  to  deploy  intra¬ 
net  for  310,000  users,  despite 
cost,  management  concerns. 

7  UPS  set  to  launch  GPRS 

wireless  net  infrastructure. 

10  Serial  SCSI  disk  technology 

promises  faster  I/O  in  servers. 

12  SAP  readies  CRM  upgrade 

tailored  to  vertical  markets. 


SPECIAL  COVERAGE 


IT  LEADERS  2003 

14  IT  managers  find  offshore 
outsourcing  to  be  a  com¬ 
pelling  way  to  cut  costs. 

14  Microsoft’s  security  czar 
says  the  company  has 
made  big  strides  in  secu¬ 
rity  but  is  doing  a  poor  job 
of  patch  management. 

15  Don't  oversell  projects 
to  top  execs  when  trying 
to  show  the  value  of  IT, 
say  Premier  100  confer¬ 
ence  panelists. 

15  Kill  nonessential  projects 

and  don’t  try  to  solve  too 
many  problems  at  once, 
says  BMC’s  Jay  Gardner. 


26  Wireless  Nets  Go  Regional. 

Enterprises  are  deploying  IP- 
based  wide-area  wireless  sys¬ 
tems  and  services  that  share 
wireless  LAN  frequencies  but 
let  you  connect  buildings  and 
bypass  telecom  providers. 

28  Emerging  Technologies:  Virtu¬ 
ally  Face  to  Face.  Corporate 
infrastructure  upgrades  to 
support  IP  telephony  are 
paving  the  way  for  IP  video- 
conferencing  technologies. 

32  Security  Manager’s  Journal: 
Escape  From  SQL  Hell.  Math¬ 
ias  Thurman’s  company  es¬ 
capes  the  clutches  of  the  SQL 
Slammer  worm  —  almost. 


MANAGEMENT 

35  Follow  the  Money.  A  thor¬ 
ough  investigation  into  the 
financial  health  of  your 
prospective  IT  vendors  could 
prevent  adverse  effects  on 
your  own  business  operations. 

40  A  Setup  for  a  Security  Night¬ 
mare.  Author  Notra  Trulock 
details  the  appalling  state  of 
computer  security  at  the  U.S. 
Department  of  Energy  during 
one  of  the  most  infamous  es¬ 
pionage  scandals  in  recent 
decades. 

41  Newsmaker:  Paul  Brinkley, 
CIO  at  JDS  Uniphase,  saves 
$35  million  annually  from  his 
IT  budget  with  a  simple  but 
unusual  arrangement:  out¬ 
sourcing  its  Oracle  applica¬ 
tions  to  Oracle. 


8  On  the  Mark:  Mark  Hall  gets 
the  lowdown  on  an  IT  man¬ 
agement  dashboard  upgrade 
while  learning  why  Siebel  still 
has  big  friends  in  big  places. 

16  Maryfran  Johnson  believes 
that  IT  leaders’  faith  in  tech¬ 
nology  will  help  move  the 
world  forward  bit  by  bit  to 
become  a  better  place. 

16  Pimm  Fox  advises  you  to  pre¬ 
pare  a  response  with  other  de¬ 
partment  managers  for  when 
—  not  if  —  an  IT  security 
breach  happens. 

17  Michael  Gartenberg  suggests 
that  the  IT  department  is  the 
best  place  to  begin  a  company 
weblog. 

33  Robert  L.  Mitchell  says  the 

handling  of  the  recent  theft  of 
8  million  credit  card  numbers 
exposes  some  fundamental 
challenges  facing  e-commerce. 

41  John  Berry  wonders  whether 
IT  could  help  business  units 
with  economic  value  manage¬ 
ment  tasks. 

50  Frankly  Speaking:  Frank 
Hayes  warns  developers 
who  are  not  getting  “face 
time”  with  their  users  that 
their  jobs  are  ripe  for  overseas 
outsourcing. 
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The  Peril  Within 

MOBILE/WIRELESS:  Security  begins  at  home. 
Many  employees  build  their  own  wireless 
LANs,  but  that  can  mean  big  trouble  for  com¬ 
panies.  Henry  Feusi,  a  managing  consultant 
at  New  York-based  Predictive  Systems  Inc., 
says  these  setups  can  be  open  windows  for 
intruders.  O  QuickLink  36643 

Behavioral  Rules  vs.  Signatures 

SECURITY:  Both  technologies  have  their  pros 
and  cons,  which  is  why  security  expert  Yona 
Hollander  recommends  using  both  to  pro¬ 
tect  data  in  the  enterprise.  ©  QuickLink  36139 

IE  Web  Controls  in  VB.Net 

DEVELOPMENT:  A  simple  example  of  how  to 
use  the  TreeView  and  TabStrip  Internet  Ex¬ 
plorer  Web  Controls  with  Visual  Basic  .Net. 

©  QuickLink  a293Q 

What  They  Can’t  Find 
Can  Get  You  20  Years 

STORAGE:  The  area  of  records  retention  and 
destruction  has  become  something  of  a 
minefield.  IT  staff  must  use  all  of  their  re¬ 
sources  to  navigate  it  safely  and  lawfully. 

©  QuickLink  35933 

‘It’s  the  Restore,  Stupid!’ 

STORAGE:  You  can  do  the  best  backup  in  the 
world,  but  if  you  can’t  recover  your  data 
quickly  and  with  100%  certainty,  it’s  for 
naught,  says  Live  Vault  Corp.’s  CEO. 

©QuickLink  36219 


What’s  a  QuickLink? 

On  some  pages  in 
this  issue,  you'll  see 
a  QuickLink  code  pointing 
to  additional,  related  con¬ 
tent  on  our  Web  site.  Just 
enter  that  code  into  our 
QuickLink  box,  which 
you'll  see  at  the  top  of 
each  page  on  our  site 
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IBM  Upgrades  Business 
Integration  Technology 


AT  DEADLINE 


IBM  Signs  $1B 
IT  Services  Deal 

IBM  announced  a  six-year  IT 
services  deal  valued  at  about 
SI  billion  with  AXA  Group,  a 
Paris-based  insurance  and  finan¬ 
cial  services  firm.  The  compa¬ 
nies  said  IBM  will  consolidate 
AXA’s  servers,  mainframes  and 
storage  devices  into  an  “on- 
demand”  computing  installation. 
But  they  added  that  AXA  will 
retain  full  control  of  its  IT  infra¬ 
structure  and  workers. 


IETF  to  Research 
Antispam  Measures 

The  Internet  Engineering  Task 
Force  (IETF)  said  it  has  set  up  an 
antispam  research  group  to  in¬ 
vestigate  new  ways  to  help  users 
block  unsolicited  commercial 
e-mail.  The  group  will  explore  the 
development  of  a  common  archi¬ 
tecture  for  detecting  spam  and 
enforcing  user  consent  policies. 

It  will  also  consider  possible  anti¬ 
spam  legislation. 


Sun  Flans  CPUs 
With  Multiple  Cores 

At  a  meeting  with  financial  ana¬ 
lysts,  Sun  Microsystems  Inc.  out¬ 
lined  plans  to  develop  chip  multi¬ 
threading  processors,  starting 
with  an  UltraSPARC  IV  device 
due  later  this  year.  Sun  said  it 
will  put  multiple  CPU  cores  that 
can  each  simultaneously  process 
multiple  tasks  on  a  single  piece 
of  silicon.  IBM  last  month  said  it 
will  deliver  similar  processors 
next  year  [QuickLink  36523]. 


Short  Takes 

EMC  CORP.  in  Hopkinton,  Mass., 
added  Gigabit  Ethernet  support 
and  new  disk  drives  to  its  Sym- 
metrix  8000  storage  arrays 
and  announced  models  optimized 
for  use  with  mainframes. . . . 
LUCENT  TECHNOLOGIES  INC.  in 
Murray  Hills,  N.J.,  signed  an 
agreement  in  principle  to  settle 
an  accounting  probe  by  the  Secu¬ 
rities  and  Exchange  Commission. 


WebSphere  tools 
reduce  need  for  Java 
programming  skills 

BY  MARC  L.  SONGENI 

bm  is  enhancing  its  Web¬ 
Sphere  middleware  tech¬ 
nology  in  an  effort  to  sim¬ 
plify  the  task  of  creating 
and  monitoring  data  and  bus¬ 
iness-process  workflows 
through  corporate  systems. 

This  week,  IBM  will  an¬ 
nounce  an  upgrade  of  its  Web¬ 
Sphere  Business  Integration 
software  aimed  at  letting  users 
model  business  processes  that 
go  across  different  applica¬ 
tions  without  needing  to  have 
special  Java  coding  skills.  It 
also  plans  to  roll  out  improved 
development  tools  and  in¬ 
creased  Web  services  support 
(see  box). 

To  widen  the  modeling  and 
monitoring  capabilities  in 
WebSphere  Business  Integra¬ 
tion,  IBM  is  embedding  tech¬ 
nology  it  gained  in  September 
when  it  acquired  Holosofx 
Inc.,  a  business  integration 
software  vendor  in  El  Segun- 
do,  Calif.,  said  Sean  Poulley, 
director  of  WebSphere  busi¬ 
ness  development  at  IBM. 

Previously,  the  Holosofx 
applications  required  a  custom¬ 
ized  link  to  WebSphere.  They 
will  still  be  sold  separately,  but 
Poulley  said  the  Holosofx  tech¬ 
nology  will  now  be  integrated 
with  WebSphere  Business  Inte¬ 
gration  Server  Version  4.2, 
which  is  due  later  this  month. 

Closing  the  Loop 

The  Business  Integration  Mod¬ 
eler  will  let  users  outside  of  IT 
create  blueprints  of  business 
processes  that  can  be  handed 
off  to  developers  for  imple¬ 
mentation,  IBM  said.  Compa¬ 
nies  can  also  use  the  modeler 
with  the  Web  browser-based 
Business  Integration  Monitor 
to  develop  systems  with  built- 
in  thresholds  and  alerts  that 
provide  feedback  as  business 
processes  are  executed. 


“If  I’ve  got  the  modeling  tool 
integrated  with  the  monitoring 
tool,  I  get  a  closed  loop,”  Poul¬ 
ley  said.  For  instance,  he  said, 
a  manufacturer  could  create 
a  workflow  process  to  restock 
its  inventories  and  let  end 
users  know  the  cost  of  items 
as  they’re  being  procured. 

Robert  Catterall,  director 
of  strategic  technology  for  the 
e-commerce  division  at  Check- 
Free  Corp.  in  Norcross,  Ga., 
said  the  capabilities  being 
added  by  IBM  could  be  useful 
in  involving  less  technically 
skilled  workers  in  application 
integration  projects. 

“There  are  people  who 
know  Java  well,  and  there  are 


BY  MATT  HAMBLEN 

In  a  move  aimed  at  unifying 
factory-floor  networks  with  the 
ones  in  corporate  back  offices, 
Cisco  Systems  Inc.  will  unveil 
today  at  the  National  Manu¬ 
facturing  Week  show  in  Chica¬ 
go  a  ruggedized  line  of  switch¬ 
es  based  on  IP  and  Ethernet. 

The  Catalyst  2955  series  is 
designed  for  use 
in  factories  and 
in  utility,  trans¬ 
portation  and 
military  settings, 
where  tempera¬ 
tures,  humidity, 
dust  and  vibra¬ 
tions  are  more 
extreme  than  they  are  in  regu¬ 
lar  business  environments, 
Cisco  officials  said.  The  de¬ 
vices,  which  are  about  one- 
third  as  big  as  Cisco’s  regular 
switches,  are  shipping  now  and 
are  priced  from  $2,100  to  $3,600. 

The  2955  series  introduces 
the  first  rugged  Ethernet 
switches  developed  by  a  major 
networking  equipment  ven¬ 
dor,  said  Harry  Forbes,  an  ana¬ 
lyst  at  ARC  Advisory  Group 
Inc.  in  Dedham,  Mass.  He  not- 


people  who  understand  busi¬ 
ness  processes  well,  and  peo¬ 
ple  in  one  of  these  groups  are 
very  often  not  found  in  the 
other,”  Catterall  said.  Check- 
Free  uses  IBM’s  DB2  database 
and  is  contemplating  a  Web¬ 
Sphere  installation,  he  noted. 

IBM  is  making  the  right 
moves  by  starting  to  combine 
its  various  integration  prod¬ 
ucts  and  giving  them  common 
tools  and  user  interfaces,  said 
Sharyn  Leaver,  an  analyst  at 
Forrester  Research  Inc.  in 
Cambridge,  Mass.  But  IBM  has 
yet  to  standardize  on  a  single 
runtime  engine  for  its  Web¬ 
Sphere  application  and  integra¬ 
tion  servers,  she  added. 


ed  that  Cisco  is  rolling  out  the 
switches  at  a  time  when  factory- 
floor  devices  that  control  pro¬ 
duction  processes,  robots  and 
other  machines  are  starting  to 
be  equipped  with  Ethernet  in¬ 
terfaces  instead  of  manufac¬ 
turing-specific  technologies. 

The  biggest  supplier  of 
rugged  Ethernet  switches  for 
factories  is 
Hirschmann 
Electronics 
GmbH  in  Neck- 
artenzlingen, 
Germany,  Forbes 
said.  Switches 
accounted  for 
about  8%  of  the 
300,000  Ethernet-ready  de¬ 
vices  sold  for  factory  use  last 
year,  ARC  said. 

For  companies  that  have  in¬ 
stalled  Cisco  products  and  Eth¬ 
ernet  technology  in  their  main 
corporate  networks,  the  2955 
could  help  extend  to  the  manu¬ 
facturing  realm  the  quality-of- 
service  features  and  other  ca¬ 
pabilities  that  are  built  into  the 
Catalyst  technology,  said  Joel 
Conover,  an  analyst  at  Current 
Analysis  Inc.  in  Sterling,  Va. 


Cisco  Builds  Rugged  Switch 
To  Link  Factory,  Back  Office 


CISCO’S  CATALYST  2955  is 
about  one-third  the  size  of 
its  regular  switches. 


www.computerworld.com 


PRODUCT  FEATURES 


Integrated  business-process 
modeling  and  monitoring  tools 
that  IBM  bought  in  September. 

Improved  development  tools 
designed  to  reduce  the  time  it 
takes  to  set  up  data  workflows. 

IBM’s  Eclipse  framework  pro¬ 
gramming  environment  to  pro¬ 
vide  a  consistent  interface. 

Support  for  publishing  busi¬ 
ness  processes  as  Web  services. 


Doug  Brown,  director  of 
marketing  for  WebSphere 
integration,  acknowledged 
that  IBM  supports  multiple 
runtime  engines  within  the 
sprawling  WebSphere  line. 

But  by  year’s  end,  it  plans  to 
consolidate  on  one  runtime 
technology  so  applications 
will  be  reusable,  Brown  said.  I 


“You’re  going  to  be  able  to 
monitor  and  control  manufac¬ 
turing  from  the  core  network,” 
Conover  said.  He  added  that 
many  mainstream  IT  man¬ 
agers  will  be  more  willing  to 
accept  the  2955  switches  than 
devices  from  specialty  ven¬ 
dors  like  Hirschmann  because 
Cisco’s  technology  is  so  wide¬ 
ly  deployed  and  accepted. 

“I  won’t  have  to  sell  people 
on  the  brand  of  the  switch,” 
said  Carl  Staab,  manager  of 
communications  technology 
at  Emerson  Process  Manage¬ 
ment  in  Pittsburgh.  Emerson 
has  been  beta-testing  the  2955 
series  since  January  and  hopes 
to  resell  the  Cisco  switches 
with  process  control  equip¬ 
ment  that  it  markets  to  water 
and  sewer  utilities,  he  said. 

The  2955  series  also  has  12 
Ethernet  ports  —  twice  what 
the  competition  offers,  Staab 
said.  Another  advantage  over 
existing  factory-floor  switches 
is  the  2955’s  ability  to  quickly 
alert  workers  to  network  prob¬ 
lems  through  an  external  light 
on  the  device,  he  said.  I 


VIDEO  VAULT 


Cisco  upgrades  its  technology  for  caching 
high-bandwidth  data  at  network  edges: 

O  QuickLink  36726 
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Navy’s  Massive  Intranet  Rollout  OK’d 


Some  users  still  cite  costs,  other  concerns 


BY  DAN  VERTON 

The  U.S.  Navy  confirmed  last 
week  that  the  Pentagon  has 
given  it  the  go-ahead  to  move 
as  many  as  310,000  Navy  and 
Marine  Corps  IT  users  to  the 
Navy/Marine  Corps  Intranet 
(N/MCI). 

The  decision  comes  after 
months  of  operational  testing 
that  was  required  by  Congress 
before  it  would  allow  the 
Navy  to  proceed  beyond  a 
60,000-user  cap  that  it  im¬ 
posed  after  concerns  surfaced 
about  the  program’s  technical 
feasibility  and  cost  [QuickLink 
30106].  However,  after  the  suc¬ 
cessful  completion  of  the  test¬ 
ing  phase,  the  Navy  received 
permission  to  proceed  with  all 
160,000  of  the  N/MCI  seats 
that  had  been  previously  ap¬ 
proved  and  was  authorized  to 
order  an  additional  150,000 
N/MCI  seats  from  its  prime 
contractor,  Plano,  Texas-based 
Electronic  Data  Systems  Corp. 

N/MCI  is  an  IT  outsourcing 


project,  often  referred  to  as 
seat  management,  intended  to 
give  the  Navy  and  Marine 
Corps  secure,  universal  access 
to  integrated  voice,  video  and 
data  communications.  It’s  also 
designed  to  provide  pier-side 
connectivity  to  Navy  vessels 
in  port  and,  when  completed, 
will  link  more  than  310,000 


* 


N/MGI  Seat 
Deployment 


1,000 
100,000 


desktops  across  the  U.S.,  Puer¬ 
to  Rico,  Japan  and  Cuba. 

Although  most  of  the  focus 
of  the  N/MCI  deployment  re¬ 
mains  on  support  units,  Vin¬ 
cent  Madsen,  a  24-year  EDS 
veteran  who  recently  took 
over  as  client  delivery  execu¬ 
tive  for  the  N/MCI  program, 
said  the  potential  for  military 
conflict  in  Iraq  does  play  a  role 
in  planning  for  the  future.  “We 
have  to  work  closely  with  all 
the  units  to  make  sure  we’re 
not  going  to  get  in  the  way,”  he 
said.  “I  don’t  anticipate  any  de¬ 
lays,  but  we  may  move  some 
schedules  around.” 

For  now,  N/MCI  is  moving 
full  steam  ahead.  “The  results 
from  four  months  of  testing 
clearly  demonstrated  that  the 
N/MCI  is  ready  to  move  to  the 
next  level,”  Rear  Adm.  Charles 
L.  Munns,  director  of  the 
N/MCI  project,  said  in  a  state¬ 
ment  released  by  the  Navy. 

“We’re  now  moving  at  light 
speed  to  get  all  of  this  de¬ 
ployed  as  contracted  by  the 
end  of  the  year,”  said  Madsen, 


referring  to  all  310,000  seats. 

EDS  has  dedicated  more 
than  300  employees  to  deploy¬ 
ment  and  installation  and  is  re¬ 
lying  on  Dell  Computer  Corp. 
for  hardware  delivery  as  well 
as  initial  build,  configuration 
and  customer  support  for  the 
N/MCI  desktop  Windows  en¬ 
vironment,  said  Madsen. 
“We’re  going  to  rev  up  to  the 
point  where  we’ll  be  able  to 
deploy  1,000  desktops  per  day 
across  the  entire  infrastructure 
at  multiple  locations,”  he  said. 

Hurdles  Remain 

But  some  N/MCI  users  said 
they  continue  to  struggle  to 
maintain  productivity  and 
keep  N/MCI  costs  down. 

A  San  Diego-based  Naval  IT 
manager  involved  in  the  proj¬ 
ect  said  N/MCI  seats  are  cost¬ 
ing  his  customers  $3,000  to 
$6,000  per  seat  per  year.  The 
cost  is  so  high  that  some  Navy 
organizations  can’t  afford 
N/MCI  workstations  for  their 
contractor  support  personnel, 
he  said.  He  claimed  that  using 


another  contractor,  he  could 
supply  for  $570,000  what  EDS 
is  charging  a  Navy  unit  $2.5 
million  for. 

Another  manager  from  the 
Naval  Region  Southwest, 
which  includes  10  bases  in 
California  and  one  in  Nevada, 
said  his  users  continue  to  deal 
with  “nothing  but  chaos,  poor 
communication  and  lack  of 
any  deliverables.” 

One  organization  has  been 
waiting  more  than  a  year  to 
get  a  critical  application  shift¬ 
ed  to  N/MCI,  the  manager 
said.  There  has  also  been  no 
accountability  for  missed 
schedules  or  critical  applica¬ 
tion  or  system  outages,  the 
manager  added. 

The  Navy  and  EDS  have  re¬ 
peatedly  downplayed  such 
problems,  characterizing  them 
as  natural  growing  pains  and 
going  so  far  as  to  accuse  some 
civilian  Navy  employees  of 
having  an  agenda  to  kill  the 
program.  I 


COLLAPSED  TALKS 


EDS  ends  negotiations  for  a  multibillion- 
doilar  contract  with  French  firm  Alstom: 


O  QuickLink  36654 
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UPS  Readies  Wireless  Upgrade  in  U.S. 


50,000  drivers  to  get 
new  info  terminals 


BY  BOB  BREWiN 

LOS  ANGELES 


United  Parcel  Service  Inc.  will 
deploy  higher-speed  wireless 
services  to  its  U.S.  delivery 
fleet  this  year,  starting  with 
retrofitting  4,500  driver  data 
terminals  with  modems  that 
support  AT&T  Wireless  Ser¬ 
vices  Inc.’s  General  Packet  Ra¬ 
dio  Service  (GPRS)  network. 

The  retrofitting  move  is  a 
large-scale  test  of  the  GPRS 
mobile  data  service  that  will 
be  followed  by  a  rollout  of  new 
terminals  to  UPS’s  50,000-plus 
drivers  in  the  U.S.  Tamara 
Schwartz,  the  company’s  direc¬ 
tor  of  global  network  services, 
said  at  a  wireless  IT  confer¬ 
ence  held  here  last  week  by 
Gartner  Inc.  that  UPS  next 
month  will  detail  its  plans  for 


deploying  the  more  advanced 
information  terminals. 

Schwartz  wouldn’t  disclose 
any  specifics  about  the  new 
terminals,  which  will  be  made 
by  Holtsville,  N.Y.-based  Sym¬ 
bol  Technologies  Inc.  But  a 
spokeswoman  for  Atlanta- 
based  UPS  said  the  terminals 
will  be  equipped  with  GPRS 
modems  or  with  ones  that  sup¬ 
port  the  rival  Code  Division 
Multiple  Access  (CDMA) 
wireless  network  technology. 

Improved  Throughput 

For  UPS  drivers,  the  rollout 
should  mean  much  better  data 
throughput.  For  example,  the 
AT&T  Wireless  network  sup¬ 
ports  data  transmission  rates 
of  up  to  40K  bit/sec.,  com¬ 
pared  with  a  speed  of  about 
9.6K  bit/sec.  for  the  network 
services  provided  by  Reston, 
Va.-based  Motient  Corp.  that 
are  now  used  in  the  U.S. 


The  planned  U.S.  project 
follows  a  deployment  last  year 
of  GPRS-enabled  terminals  to 
15,000  UPS  drivers  in  Europe, 
where  the  company  uses  wire¬ 
less  network  services  provid¬ 
ed  by  the  T-Mobile  division  of 
Deutsche  Telekom  AG  in 
Bonn.  T-Mobile’s  GPRS  net¬ 
work  runs  at  20K  to  40K 
bit/sec.  and  replaced  a  9.6K 


bit/sec.  Mobitex  network  also 
operated  by  T-Mobile. 

Schwartz  said  the  higher 
data  rates  have  helped  UPS 
better  manage  “on-demand” 
delivery  services  in  Europe, 
where  drivers  typically  re¬ 
spond  to  requests  for  pickups 
instead  of  making  scheduled 
stops  as  they  do  in  the  U.S. 

UPS  and  Memphis-based  ri¬ 
val  FedEx  Corp.  both  said  last 
July  that  they  planned  to  stan¬ 
dardize  their  global  wide-area 


UPS’s  Wireless  IT  Strategy 


■  Equip  70,000  drivers  worldwide  with  wide-area  wireless  services. 

■  Equip  4,500  driver  terminals  in  the  U.S.  with  GPRS  modems  as 
a  test  and  then  roll  out  new  terminals  to  all  of  its  U.S.  drivers. 

■  Use  a  combination  of  GPRS  and  CDMA  networks  to  provide  full 
wireless  coverage  in  the  U.S. 

■  Start  a  U.S.  rollout  this  year  of  a  bar-code  sorting  system  based 
on  802.11b  wireless  LAN  and  Bluetooth  technology. 

■  Finish  the  bar-code  sorting  installation  here  next  year  and  start 
a  rollout  to  operations  in  the  rest  of  the  world  in  2005. 


wireless  architectures  on 
GPRS  technology  wherever 
it’s  available.  But  the  two  com¬ 
panies  also  acknowledged  that 
they  would  have  to  use  other 
wireless  standards  in  some  lo¬ 
cations  [QuickLink  31154], 

At  last  week’s  conference, 
Schwartz  said  that’s  still  part 
of  the  plan  at  UPS.  The  com¬ 
pany  will  rely  on  CDMA  net¬ 
works  that  are  operated  by 
carriers  such  as  Verizon  Wire¬ 
less  and  Sprint  PCS  Group  to 
augment  GPRS  in  the  U.S.,  be¬ 
cause  Redmond,  Wash.-based 
AT&T  Wireless  doesn’t  pro¬ 
vide  coverage  in  all  parts  of 
the  country,  she  said. 

Gartner  analyst  Ken  Du¬ 
laney  said  UPS  has  no  choice 
but  to  go  with  both  GPRS  and 
CDMA  in  the  U.S.  In  contrast, 
European  countries  offer  com¬ 
panies  GPRS  as  a  single  wire¬ 
less  standard,  he  noted. 

The  AT&T  Wireless  GPRS 
network  will  be  tested  at  pack¬ 
age-delivery  hubs  with  more 
than  60  drivers,  UPS  said.  ► 


COMPUTERWORLD  March  3, 2003 


NEWS 


www.computerworld.com 


MARK  HALL  ■  ON  THE  MARK 

IT  Digital  Dashboard 
To  Get  Face-Lift . . . 

. . .  and  improved  integration  with  major  applications  in  Version  5.0  of 
Kintana  Dashboard  slated  for  June,  sources  said.  Kintana  Inc.  in  Sun¬ 
nyvale,  Calif.,  whose  eponymous  IT  capacity  planning  and  resource 
management  product  has  attracted  a  growing  number  of  users  in  the 
past  year,  will  begin  beta-testing  its  anticipated  upgrade  next  month. 
The  company  is  adding  adapters  for  Microsoft  Outlook  and  People- 
Soft.  It  also  plans  to  improve  the  dashboard’s  integration  with  Micro¬ 


soft  Project.  Expect  to  see  some  modifi¬ 
cations  to  the  user  interface,  such  as  ap¬ 
proval  buttons  appearing  at  both  the  top 
and  bottom  of  the  scrolling  screens. 
William  Farrow,  CIO  at  the  Chicago 
Board  of  Trade  and  a  user  of  Kintana 
Dashboard,  said  an  adapter  to  the  general 
ledger  portion  of  PeopleSoft  “would  be  some¬ 
thing  really  hot”  for  his  company  because  it 
has  done  little  customization 
to  its  PeopleSoft  application 
and  would  be  able  to  quickly 
adopt  the  upgrade  and  roll  IT 
project  changes  into  the  cor¬ 
porate  general  ledger.  ■  Al¬ 
though  CRM  giant  Siebel  Sys¬ 
tems  Inc.  is  getting  knocked 
around  these  days  by  its  much 
smaller  ASP  competitors, 
such  as  SalesForce.com  Inc. 
and  UpShot  Inc.,  larger  com¬ 
panies  still  prefer  it.  At  least 
that’s  what  CIOs  were  saying 
at  Computerworld’ s  Premier 
100  IT  Leaders  Conference 
last  week.  Even  Jay  Gardner, 

CIO  at  BMC  Software  Inc.  in 
Houston,  whose  company 
bombed  its  first  two  attempts 


to  install  Siebel,  said  BMC  evaluated  the 
ASP  approach  after  two  failed  Siebel  in¬ 
stalls,  but  “we  felt  the  ASP  model  would  not 
give  us  the  control,  agility  or  scalability  to  go 
where  we  wanted  to  go.”  Third  time  be¬ 
ing  the  charm,  BMC  now  has  3,500  users 
of  Siebel  6.3,  and  Gardner  said  the  com¬ 
pany  will  upgrade  to  Version  7.05  this 
summer.  In  fact,  when  the  upgrade  is 

complete,  the  Siebel  applica¬ 
tion  running  on  an  Oracle 
data  warehouse  will  be  the 
primary  repository  for  all 
corporate  data.  Maybe  “the 
end  of  software,”  a  Sales- 
Force.com  marketing 
mantra,  isn’t  so  nigh  after  all. 
■  Hype  prepares  us  for  the 
future,  suggests  Tim  Howes, 
CTO  at  Opsware  Inc.  in  Sun¬ 
nyvale,  Calif.  But  what  if  the 
future  is  already  here?  Com¬ 
panies  like  IBM,  Hewlett- 
Packard  Co.  and  Sun  Micro¬ 
systems  Inc.,  with  their  vari¬ 
ations  on  utility  computing, 
“are  marketing  their  vision 
of  what  data  center  comput¬ 
ing  will  look  like  in  three  to 


five  years,”  he  says.  Howes  doubts  that  it 
will  resemble  what  the  major  vendors  are 
betting  on.  That’s  because  these  Big 
Three  vendors  have  all  built  their  utility 
model  around  big  iron.  But  Howes  pooh- 
poohs  that  idea.  “It’s  more  expensive  taking 
the  mainframe  approach  than  going  down  to 
[computer  retailer]  Fry’s  and  buying  an¬ 
other  inexpensive  server,”  he  claims. 
“They’re  more  reliable  and  just  plain 
cheaper,  too.”  Furthermore,  he  argues,  a 
lot  of  what  the  Big  Three  are  selling  al¬ 
ready  exists,  such  as  load-balancing  and 
shared-server  pools,  and  companies  are 
already  handling  planned  surges  (Super 
Bowl-type  events)  and  unplanned  surges 
(such  as  9/11)  in  resource  demand.  His 
view,  of  course,  is  tainted  by  a  different 
sales  pitch,  which  is  that  Opsware  system 
management  software  lets  you  manage 
scads  of  small  servers  with  far  fewer  re¬ 
sources.  Howe  boasts  that  a  single  sys¬ 
admin  can  “easily  handle  100  machines” 
with  agents  called  Intelligent  Software 
Modules  (ISM).  These  ISMs  have  to  be 
written  for  each  program  running  on  the 
server.  Currently,  Opsware  has  60  ISMs, 
but  it  will  have  a  “couple  hundred”  by 
year’s  end,  Howe  says.  ■  You  might  want 
to  get  some  control  over  all  those  Fry’s  shop¬ 
pers  by  installing  Frictionless  Sourcing 
3.0,  a  policy-based  procurement  package 
that  helps  manage  spending  that  doesn’t 
always  go  through  the  purchasing  depart¬ 
ment.  Available  this  week  from  Friction¬ 
less  Commerce  Inc.  in  Cambridge,  Mass., 
the  upgrade  includes  a  handful  of  new 
modules,  including  spend  analysis  and 
workflow  management.  It  can  also  do  de¬ 
mand  aggregation  so  large  companies 
with  multiple  locations  buying  the  same 
products  can  build  a  single  large  pur¬ 
chase  order  for  a  better  deal.  And  global 
companies  now  can  have  workers  review 
a  single  purchase  in  their  local  languages 
and  currencies.  I 


Get  Wired 


Practical  Sales  Tools 

Inc.  in  Plymouth 
Meeting,  Pa.,  this 
week  ships  the  X3 
release  of  Wired- 
Contact,  which  gives 
remote  sates  and 
field  representatives 
access  to  ACT  5  or  6 
central  databases  at 
$199  per  user.  This 
version  adds  support 
for  Pocket  PCs,  inte¬ 
grates  with  HTML 
editors  and  increases 
the  security  features. 


Sockeye  Upgrades  WAN  Routing  Tools 


Ford  to  Slash  IT 
Budget  by  $300M 

Ford  Motor  Co.  said  it’s  cutting 
its  IT  budget  by  about  $300  mil¬ 
lion  as  part  of  a  cost-reduction 
initiative  that  began  early  last 
year.  The  cutbacks  will  lower 
Ford’s  IT  spending  by  20%  and 
may  include  layoffs  of  some  of 
its  2,800  contract  IT  workers,  a 
spokesman  said.  He  added  that 
Ford,  which  has  about  6,000  IT 
staffers,  is  evaluating  which  proj¬ 
ects  will  be  affected  by  the  cuts. 


HP  Results  Hit  by 
Weak  U.S.  Sales 

Hewlett-Packard  Co.  reported 
lower-than-expected  financial 
results  for  its  first  quarter  and 
pinned  most  of  the  blame  on  con¬ 
tinued  weak  IT  spending  in  the 
U.S.  HP  said  it  had  a  $721  million 
profit  on  revenue  of  $17.9  billion 
in  the  quarter,  which  ended  Jan. 
31.  HP  didn’t  disclose  compara¬ 
tive  year-earlier  numbers  that 
take  its  acquisition  of  Compaq 
Computer  Corp.  into  account. 

CERTJT^dorT^ 

Warn  of  SIP  Flaw 

The  CERT  Coordination  Center  in 
Pittsburgh  warned  about  a  soft¬ 
ware  flaw  that  could  affect  net¬ 
working  devices  with  support  for 
the  Session  Initiation  Protocol 
(SIP).  Analysts  and  IT  vendors 
said  users  haven’t  reported  any 
problems  as  a  result  of  the  flaw. 
But  vendors  such  as  Cisco  Sys¬ 
tems  Inc.  and  Nortel  Networks 
Ltd.  said  some  of  their  products 
are  vulnerable,  and  they  have 
made  patches  available. 


Short  Takes 

DELL  COMPUTER  CORP.  CEO 
Michael  Dell  said  at  a  conference 
that  the  company  will  announce 
its  first  Dell-branded  printers 
this  month. . , .  DIVINE  INC.,  a 
Chicago-based  software  and  IT 
services  vendor,  filed  for  Chapter 
11  protection  and  said  it’s  explor¬ 
ing  a  possible  sale  of  its  assets. 


BY  MATT  HAMBLEN 

Sockeye  Networks  Inc.  today 
will  release  an  upgrade  of  its 
wide-area  network  routing- 
optimization  software  that’s 
designed  to  support  the  com¬ 
plex  network  billing  models 
used  by  companies  that  rely 
on  multiple  Internet  service 
providers  (ISP). 

With  the  new  capabilities 
built  into  Version  3.0  of  Sock- 
eye’s  GlobalRoute  technology, 
companies  that  use  more  than 
one  ISP  can  automatically  set 
up  optimal  routes  for  network 


traffic,  based  on  the  terms  of 
their  contracts.  Network  man¬ 
agers  can  use  the  information 
to  move  traffic  to  faster  or 
cheaper  links  and  to  help  re¬ 
negotiate  ISP  contracts  when 
they  come  up  for  renewal, 
Sockeye  officials  said. 

The  Waltham,  Mass.-based 
company  is  the  second  vendor 
in  the  emerging  market  for 
route-control  technology  to 
announce  an  upgrade  in  re¬ 
cent  weeks.  Fremont,  Calif.- 
based  netVmg  Inc.  last  month 
shipped  a  new  release  of  its 


Flow  Control  Platform  soft¬ 
ware  and  added  a  pair  of  low- 
end  route-control  appliances. 

Other  companies  that  offer 
technology  to  help  users  find 
the  fastest  and  cheapest  routes 
for  data  traffic  over  WAN  links 
include  RouteScience  Tech¬ 
nologies  Inc.  in  San  Mateo, 
Calif.,  and  Proficient  Systems 
Inc.  in  Atlanta.  But  Sockeye  is 
the  only  vendor  offering  those 
capabilities  as  a  managed  ser¬ 
vice,  said  Charles  Rutstein,  an 
analyst  at  Forrester  Research 
Inc.  in  Cambridge,  Mass. 


Sockeye  installs  its  route- 
control  appliances  at  cus¬ 
tomer  sites  and  manages  them 
for  monthly  fees  that  start  at 
$4,000. 

Digital  West  Networks  Inc., 
an  IT  hosting  company  in  San 
Luis  Obispo,  Calif.,  has  been 
using  GlobalRoute  3.0  for 
about  a  month  to  help  set  up 
optimum  routing  for  the  data 
that’s  handled  by  its  four  ISPs, 
said  Chief  Technology  Officer 
Josh  Richards. 

“It’s  in  our  interest  to  get 
our  customers’  traffic  pushed 
as  fast  as  possible,  and  this 
software  has  provided  a  differ¬ 
entiator  for  us,”  he  said.  I 
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Now  you  can  know 
what,  when,  where 
and  how  data  change 
has  occurred. 


Tripwire®  assures  the  integrity  of  your  data 
and  gives  you  the  ability  to  effectively  pinpoint 
and  manage  undesired  change  across  ail  your 
servers  and  network  devices,  By  establishing 
a  baseline  of  data  in  its  known  good  state, 
Tripwire  software  monitors  and  reports  any 
changes  to  that  baseline  and  enables  rapid 
discovery  and  recovery  when  an  undesired 
change  occurs. 

Maximize  System  Uptime 

■  identify  change  quickly 

■  Enable  quick  restoration  to  a  desired  state 

■  Eliminate  risk  and  uncertainty 

Failsafe  Foundation  for  Data  Security 

■  Ensure  the  integrity  of  your  data 

■  Enable  detailed  audit  reporting 

■  Granular  visibility  and  controi 

Lower  Costs  and  Frustration 

^  Greatly  reduces  the  time  it  takes  to 
find  and  diagnose  problems 


Tripwire’s  data  integrity  assurance  solutions 
are  the  only  way  to  have  100%  confidence 
that  your  systems  remain  uncompromised. 

In  the  event  of  a  change  in  state,  you’ll  know 
exactly  what,  when,  where  and  how  change 
has  occurred  so  you  can  recover  quickly. 

For  a  FREE  30-day  fully-functiona!  demo 
and  copy  of  the  white  paper  “Data  Integrity 
Assurance  in  a  Layered  Security  Strategy...”, 

cal!  toll-free:  1 -800-TRIPWIRE  (874.7947) 
or  visit  http://enterprise.tripwire.com  today! 
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Serial  SCSI  Promises 
Faster  I/O  in  Servers 


Drive  vendors  set 
shipment  plans  as 
spec  OK  nears 

BY  LUCAS  MEARIAN 

N IT  STANDARDS 
body  is  close  to  rati¬ 
fying  a  new  serial 
interface  specifica¬ 
tion  for  SCSI  disk  drives  that’s 
expected  to  speed  up  I/O 
throughput  in  servers  and 
could  eventually  challenge  Fi¬ 
bre  Channel  technology’s 
share  of  the  high-end  disk  ar¬ 
ray  pie. 

The  serial-attached  SCSI 
specification  is  expected  to  be 
approved  during  the  second 
quarter  by  the  T10  technical 
committee  of  the  Washington- 
based  International  Commit¬ 
tee  for  Information  Technolo¬ 
gy  Standards.  Disk  makers 
such  as  Seagate  Technology 
LLC  and  Maxtor  Corp.  last 
week  said  they  plan  to  begin 
shipping  serial  SCSI  drives  to 


system  vendors  by  year’s  end. 

The  IP-based  technology 
will  support  faster  I/O 
throughput  than  the  current 
parallel  SCSI  interface  does, 
said  Gordy  Lutz,  a  product 
marketing  manager  at  Scotts 
Valley,  Calif. -based  Seagate. 

Serial  SCSI  is  expected  to 
replace  its  parallel 
predecessor  as  the 
standard  disk-drive 
interface  in  most 
servers  as  well  as 
in  workstations 
and  low-end  to 
midrange  disk  ar¬ 
rays,  according  to 
John  Lohmeyer,  the  T10  tech¬ 
nical  committee’s  chairman. 

Drive’s  Advantages 

But  the  new  drives  will  also 
offer  faster  I/O  speeds  than  Fi¬ 
bre  Channel  devices  do,  Loh¬ 
meyer  said.  And  like  Fibre 
Channel  technology,  serial 
SCSI  drives  will  have  dual  I/O 
ports  for  fail-over  purposes 


and  will  support  simultaneous 
send-and-receive  operations. 

Seagate,  which  makes  about 
95%  of  the  Fibre  Channel 
drives  used  in  high-end  disk 
arrays,  said  it  expects  serial 
SCSI  and  Fibre  Channel  to 
complement  each  other.  But 
Milpitas,  Calif.-based  Maxtor 
is  betting  on  serial 
SCSI  to  replace  Fi¬ 
bre  Channel  disk  in 
five  to  10  years. 

Because  the 
specification  sup¬ 
ports  point-to- 
point  connections 
between  disks  and 
controllers  through  the  use  of 
so-called  extenders,  there 
should  be  no  competing  de¬ 
mands  to  slow  down  the  flow 
of  data,  as  there  are  on  con¬ 
ventional  system  buses,  said 
Brendan  Collins,  director  of 
product  marketing  at  Maxtor. 

Lev  Gonick,  CIO  at  Case 
Western  Reserve  University  in 
Cleveland,  said  the  ability  to 


open  up  the  internal  band¬ 
width  of  servers  is  serial 
SCSI’s  greatest  potential  fea¬ 
ture  for  improving  his  school’s 
operations. 

Mark  Price,  director  of 
enterprise  architecture  at 
Carlson  Companies  Inc.,  said 
serial  SCSI  will  become  inter¬ 
esting  to  the  Minneapolis- 
based  travel  industry  con¬ 
glomerate  “at  the  point  when 
the  cost  of  it  becomes  equal  to 
or  less  than  what  we’re  cur¬ 
rently  using.” 

Carlson  now  uses  a  Fibre 
Channel  storage-area  network 
(SAN)  with  multiprotocol 


switches  made  by  San  Jose- 
based  Nishan  Systems  Inc.  to 
connect  mirrored  data  centers 
over  IP.  But,  Price  said,  “we 
think  Fibre  Channel  is  proba¬ 
bly  a  shorter-lived  technology. 
It’s  very  expensive  and  com¬ 
plicated  to  implement.” 

Serial  SCSI  will  likely  be¬ 
come  “an  alternative  to  doing 
Fibre  Channel  in  [SANsJ,  but 
it’s  not  the  panacea,”  said 
Jamie  Gruener,  an  analyst  at 
Gartner  Inc.  in  Stamford, 
Conn.  “It’s  meant  to  replace 
parallel  SCSI.  It’s  not  meant  to 
be  a  complete  replacement  of 
everything.”  I 


Storage  Standards 
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SERIAL  SCSI 


■  36  bit/sec.  throughput,  with 
66  bit/sec.  planned  by  2006 

■  Includes  dual  1/0  ports 

■  Supports  external  cable 
lengths  of  up  to  6  meters 

■  Uses  a  direct-connect  architec¬ 
ture  with  “extenders”  to  link  mul¬ 
tiple  disk  drives 


FIBRE  CHANNEL 


■  26  bit/sec.  throughput,  with 
46  bit/sec.  planned  by  2005 

■  Includes  dual  1/0  ports 

■  Supports  external  cable 
lengths  of  up  to  15  meters 

■  Uses  arbitrated  loops  or  loop 
switched  architectures  to  link 
multiple  disk  drives 


ssShhSbM 
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TWO  FOR  ONE 

Users  will  be  able  to  combine 
serial  SCSI  drives  and  less 
expensive  ATA  devices  in 
servers  and  disk  arrays: 

O  QuickLink  36708 
www.computerworld.com 


Veritas  Upgrades  Backup  Software,  Looks  to  Diversify 


BY  LUCAS  MEARIAN 

Veritas  Software  Corp.  last 
week  upgraded  its  flagship 
data  backup  technology.  But 
Veritas,  the  second-largest 
vendor  of  storage  manage¬ 
ment  tools,  is  also  embarking 
on  an  acquisition-fueled  strat¬ 
egy  to  expand  into  other  IT 
management  technologies. 

The  plan  to  augment  prod¬ 
ucts  such  as  its  NetBackup 
software  with  new  server  and 
application  management  tools 
is  aimed  at  helping  Mountain 
View,  Calif. -based  Veritas 
compete  against  more  diversi¬ 
fied  rivals  such  as  EMC  Corp., 
Computer  Associates  Interna¬ 
tional  Inc.  and  IBM. 

Veritas  officials  said  their 
goals  are  to  offer  IT  adminis¬ 
trators  a  bundled  suite  of  man¬ 
agement  tools  and  increase 
the  company’s  annual  revenue 
from  $1.5  billion  to  $5  billion 


over  the  next  three  years. 

To  some  users,  the  plan 
makes  a  lot  of  sense.  For  ex¬ 
ample,  Tom  Guthrie,  vice 
president  of  technology  oper¬ 
ations  at  Atlanta-based  Cox 


Tech  Additions 


Veritas  has  announced  the 
following  acquisitions: 

PRECISE  SOFTWARE 
SOLUTIONS  LTD.,  which  sells 
application  performance  man¬ 
agement  software;  due  to  be 
completed  by  midyear. 

JAREVA  TECHNOLOGIES  INC., 
a  developer  of  software  for  re¬ 
mote  provisioning,  deployment 
and  configuration  of  servers; 
bought  in  December. 

STORAGE  REPORTER,  a  data 
storage  usage  reporting  tool 
developed  by  NTP  Software; 
purchased  in  November. 


Communications  Inc.,  said 
there’s  definite  value  in  the  di¬ 
rection  Veritas  is  taking. 

“With  all  of  our  vendors, 
we’ve  encouraged  them  to  go 
up  the  value  chain  in  areas 
they’re  good  at,  and  we’re  hap¬ 
py  to  interact  with  them  about 
that,”  Guthrie  said.  He  recent¬ 
ly  standardized  backup  opera¬ 
tions  on  Cox’s  10TB  storage- 
area  network  (SAN)  by  in¬ 
stalling  NetBackup. 

Veritas  has  announced  three 
acquisitions  since  November, 
adding  products  in  areas  such 
as  server  provisioning  and  ap¬ 
plication  performance  man¬ 
agement  (see  box). 

Bill  Augustadt,  chief  tech¬ 
nology  officer  at  BlueStar  So¬ 
lutions  Inc.,  said  the  ability  to 
pool  server  capacity  to  ad¬ 
dress  application  needs  and 
then  monitor  performance  on 
the  fly  should  help  the  Cuper¬ 


tino,  Calif.-based  application 
outsourcing  firm  more  effi¬ 
ciently  control  its  services  ac¬ 
cording  to  customer  needs. 

“Any  automation  we  can  do 
will  allow  us  to  scale  across 
platforms  with  fewer  people 
to  manage  them,”  said  Aug¬ 
ustadt,  who  uses  various  Veri¬ 
tas  products  to  handle  data 
backups  on  a  160TB  SAN. 

Veritas’  big  task  this  year  is 
to  “consolidate  and  integrate 
the  companies  we  acquired,” 
said  Jeremy  Burton,  the  com¬ 
pany’s  chief  marketing  officer. 
“But  I  don’t  think  it  will  be 
technology  that  hinders  us.”  If 
problems  do  arise,  they  most 
likely  will  be  related  to  sales 
execution  issues,  he  noted. 

Anders  Lofgren,  an  analyst 
at  Giga  Information  Group 
Inc.,  predicted  that  other  stor¬ 
age  software  vendors  will 
adopt  similar  expansion  plans. 


But,  he  added,  “for  Veritas  to 
build  credibility  outside  of  the 
storage  management  space  — 
that  will  take  some  time.” 

In  January,  Veritas  reported 
a  fourth-quarter  net  loss  of 
$49  million  on  revenue  of  $405 
million.  But  the  company  said 
business  was  better  than  ex¬ 
pected,  and  it  reported  a  $57 
million  profit  for  2002  as  a 
whole,  compared  with  a  net 
loss  of  $643  million  for  2001. 

NetBackup  4.5  includes  a 
new  feature  called  Instant  Data 
Recovery,  which  lets  users 
recover  data  directly  from 
disk  drives  instead  of  from 
tape  devices,  Veritas  said.  The 
upgrade  also  streamlines  the 
process  of  storing  Microsoft 
Exchange  e-mail  attachments.  I 


MORE  TO  WORK  WITH 


Cox  Communications  says  NetBackup 
has  helped  increase  use  of  its  available 
storage  capacity: 


O  QuickLink  36521 
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What  challenges  do  you  face  today?  Decreasing  budgets?  The 
lurking  possibility  of  downtime?  It's  hard  enough  to  focus  on 
moving  your  business  forward  when  you're  constantly  looking 
over  your  shoulder  to  see  if  everything  is  up  and  running. 


The  new  HP  ProLiant  DL740 
8-way  with  hot- plug 
RAID  memory. 

•  Ultradense  4u  modular  chassis 
with  up  to  eight  Intel®  Xeon™  MR 
1.5  GHz  or  2.0  GHz  processors 

•  Up  to  64GB  addressable  memory 
■  Groundbreaking  F8  chipset 

•  6-64  bit/100  MHz  PCI-X  slots 

•  Integrated  Lights-Out  Standard 
(iLO)  for  Remote  Server  Mgmf. 


The  new  HP  ProLiant  DL760 
G2  8-woy  with  hot-plug 
RAID  memory. 

•  Up  to  eight  Intel®  Xeon™  MR 

1.5  GHz  or  2.0  GHz  processors 

•  Up  to  64GB  addressable  memory 

•  Groundbreaking  F8  chipset 

•  10-64  bit/100  MHz  PCI-X, 

1-64  bit  33  MHz  slots 

•  Remote  Insight  Lights-Out  Edition  II 
(optional)  for  Remote  Server  Mgmt. 


Besides,  that's  the  job  of  the  new  HP  ProLiant  DL700  series 
running  Intel®  Xeon™  MR  processors.  An  adaptive  infrastructure 
begins  with  these  HP  ProLiant  servers  which  come  equipped 
with  tools  that  predict,  self-diagnose  and  fix  many  fault 
conditions.  And  now  with  hot-plug  RAID  memory  exclusively 
from  HR  you  can  add  or  replace  DIMMs  without  turning 
your  systems  off.  Both  work  with  the  HP  ProLiant  Essentials 
Foundation  Pack  featuring  Insight  Manager  7 software  which 
monitors  and  controls  your  infrastructure  for  maximum  uptime. 

At  the  end  of  the  day,  you'll  have  more  control  over  your 
infrastructure,  help  avoid  unplanned  downtime  and  reduce 
overall  maintenance  costs.  Not  to  mention  freeing  yourself 
up  for  more  important  things. 


To  learn  how  HP  ProLiant  servers  can  be  a 
part  of  maximizing  your  company's  uptime, 
download  CMP's  executive  brief  on  high  availability 
at  www.hp.com/go/proliant8S  or  call 
1  -800-282-6672,  option  5,  and  mention  code  YPH. 
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Qwest  Execs  Face 
Fraud  Charges 

The  Justice  Department  said  a 
Denver  grand  jury  indicted  four 
former  Qwest  Communications 
International  Inc.  executives  on 
corporate  accounting  fraud 
charges.  The  Securities  and  Ex¬ 
change  Commission  also  filed 
civil  fraud  charges  against  the 
four  as  well  as  three  other  for¬ 
mer  executives  and  Qwest’s  cur¬ 
rent  senior  vice  president  of  fi¬ 
nance.  Denver-based  Qwest  said 
it’s  cooperating  with  the  probe. 


Bankrupt  Peregrine 
Turns  to  Mediator 

Peregrine  Systems  Inc.  said  it 
has  agreed  to  use  a  mediator  to 
try  to  resolve  differences  with  its 
creditors  over  a  bankruptcy  reor¬ 
ganization  plan  filed  by  the  San 
Diego-based  asset  management 
software  vendor.  In  return,  the 
creditors  will  stay  a  motion  seek¬ 
ing  to  end  Peregrine’s  exclusive 
right  to  propose  a  reorganiza¬ 
tion.  Peregrine  sought  Chapter  11 
protection  in  September. 


SAP  Readies  CRM  Upgrade 

With  Vertical  Industry  Focus 


New  apps  will  also  include  increased 
support  for  Web  services,  mobile  users 


BY  MARC  L.  SONGINI 

ap  ag  is  readying  an 
upgrade  of  its  custo¬ 
mer  relationship  man¬ 
agement  (CRM)  soft¬ 
ware  that  officials  said  will  de¬ 
liver  more  industry-specific 
functions  and  increased  ties  to 
other  applications. 

SAP  plans  to  release  the 
next  version  of  its  mySAP 
CRM  software  in  June.  As  part 
of  the  upgrade,  it  will  expand 
the  ability  of  the  applications 
to  use  Web  services  technolo¬ 
gy  to  take  data  feeds  from 
both  internal  and  external  sys¬ 
tems,  said  Peter  Zencke,  a 
member  of  SAP’s  executive 
board.  That  will  let  users  draw 
on  more  information  and  bet¬ 
ter  exploit  analytical  CRM 
tools  to  improve  their  interac¬ 
tions  with  customers,  he  said. 

The  new  release  will  also 


include  built-in  business  proc¬ 
esses  specific  to  22  vertical  in¬ 
dustries,  Zencke  said.  For  in¬ 
stance,  SAP  plans  to  expand 
its  marketing  campaign  man¬ 
agement  functions  for  compa¬ 
nies  in  the  consumer  packaged 
goods  market. 

Seeking  a  Remedy 

Eric  Bloom,  vice  president  of 
IT  at  Endo  Pharmaceuticals 
Holdings  Inc.  in  Chadds  Ford, 
Pa.,  uses  SAP’s  R/3  enterprise 
resource  planning  software 
and  said  he  would  like  to  see 
SAP  roll  out  a  CRM  module 
for  the  pharmaceuticals  indus¬ 
try.  The  ability  to  tie  together 
customer  data  from  multiple 
systems  would  be  a  big  advan¬ 
tage  for  Endo,  he  noted. 

Bloom  said  SAP  has  been 
trying  to  put  together  such  a 
product,  but  he  added  that  it’s 


CRM  Additions 

SAP  said  the  next  release 
of  mySAP  CRM  will: 

LET  mobile  devices  access  its  full 
range  of  CRM  functions. 

INCLUDE  more  features  tailored 
for  different  vertical  industries. 

os  *«*  «  a  «  #  «  *  «  «.*  *  ®  a  *  ft  «  >  «'.»  *  *.*  #•. 

USE  Web  services  to  take  data 
feeds  from  more  sources. 

*•>  v*  ;*.#  *  ■*  3  *. 

PRESENT  data  from  multiple 
systems  via  a  portal  interface. 

hard  for  vendors  to  create  a 
single  set  of  CRM  applications 
that  can  meet  the  needs  of 
companies  with  different  busi¬ 
ness  processes,  even  within 
the  same  industry.  Endo  cur¬ 
rently  uses  some  homegrown 
CRM  tools,  Bloom  said. 

An  SAP  spokesman  said 
pharmaceuticals  is  one  of  the 
vertical  industries  that  the 
CRM  upgrade  will  address 
through  functionality  such  as 


capabilities  for  analyzing  con¬ 
tested  charges  and  managing 
drug-sampling  procedures. 

SAP’s  increased  vertical- 
market  focus  shows  that  it  rec¬ 
ognizes  there’s  no  such  thing 
as  one-size-fits-all  CRM,  said 
Erin  Kinikin,  an  analyst  at 
Giga  Information  Group  Inc. 
in  Cambridge,  Mass.  Many 
users  have  struggled  to  apply 
CRM  technology  to  their  spe¬ 
cific  business  needs,  she  said. 

MySAP  CRM  in  particular 
could  appeal  to  R/3  users  be¬ 
cause  of  its  tight  integration 
with  SAP’s  back-office  appli¬ 
cations,  Kinikin  added. 

SAP  will  make  all  its  CRM 
functionality  accessible  to  end 
users  with  mobile  devices  for 
online  or  off-line  processing, 
Zencke  said.  Currently,  hand¬ 
held  devices  are  limited  to  us¬ 
ing  SAP’s  sales  force  automa¬ 
tion  tools.  The  company  will 
also  make  R/3  and  its  other 
business  applications  hand- 
held-accessible,  Zencke  said.  I 


Microsoft  Upgrades 
XP  Rollout  Tools 

Microsoft  Corp.  updated  tools 
that  are  designed  to  help  corpo¬ 
rate  users  speed  up  rollouts  of 
Windows  XP  Professional  and 
Office  XP.  The  tools,  available  at 
no  cost  on  Microsoft’s  Web  site, 
include  new  features  for  testing 
application  compatibility  and 
scanning  PCs  for  missing  securi¬ 
ty  updates.  Microsoft  also  began 
beta-testing  a  tool  kit  for  devel¬ 
oping  peer-to-peer  applications. 


Short  Takes 

COMPUTER  ASSOCIATES  INTER¬ 
NATIONAL  INC.  plans  this  week 
to  release  Version  7  of  its  eTrust 
Antivirus  software,  which  bun¬ 
dles  together  several  tools. . . . 
ENTERASYS  NETWORKS  INC.  in 
Rochester,  N.H.,  said  it  has  set- 
tied  an  accounting  investigation 
launched  by  the  SEC  last  year. 


Continued  from  page  1 

CRM  Analytics 

dig  through  data  repositories 
for  customer  information  and 
then  dump  the  data  into  Excel 
spreadsheets  in  order  to  con¬ 
duct  analyses,  Carroll  said. 

The  analytical  applications 
now  take  feeds  directly  from 
Honeywell’s  Siebel-based  call 
center  and  sales  force  automa¬ 
tion  systems  as  well  as  from 
other  data  sources.  In  addi¬ 
tion,  the  dashboard  user  inter¬ 
face  is  easy  to  use  and  config¬ 
ure,  Carroll  said.  “We  had 
many  pessimistic  people  here, 
but  now  it’s  ‘click’  and  take 
off,”  he  added,  referring  to 
prompts  that  are  built  into  the 
software  to  help  automate 
data-analysis  procedures. 

CRM  analytics  “has  been 
the  next  ‘new’  thing  that  never 
really  happened  for  the  past 
few  years,”  said  Erin  Kinikin, 
an  analyst  at  Giga  Information 


Group  Inc.  in  Cambridge, 
Mass.  But  that  could  change 
over  the  next  couple  of  years, 
now  that  San  Mateo,  Calif.- 
based  Siebel  and  other  CRM 
vendors  are  moving  to  embed 
analysis  capabilities  into  their 
applications,  she  said. 

In  addition  to  Siebel’s  analy¬ 
sis  technology,  PeopleSoft  Inc. 
in  December  announced  a 
marketing  module  with  30 
built-in  analytical  capabilities. 
SAP  AG  said  it  plans  to  beef 


up  the  analysis  features  in  its 
CRM  software  as  part  of  an 
upgrade  due  in  June  (see  relat¬ 
ed  story,  above). 

The  Mutual  of  Omaha  Com¬ 
panies  is  in  the  initial  phases 
of  rolling  out  real-time  analyt¬ 
ical  CRM  software  developed 
by  San  Mateo-based  E.piphany 
Inc.  The  insurer  has  already 
implemented  E.piphany’s  sales 
and  marketing  tools  and  is 
now  phasing  in  its  marketing 
and  campaign  analytics,  said 


John  O’Donovan,  first  vice 
president  of  e-business  part¬ 
nership  at  Mutual  of  Omaha. 

The  analytics  project  should 
be  wrapped  up  by  midsum¬ 
mer,  O’Donovan  said.  When 
it’s  installed,  the  software  will 
let  the  company  use  CRM  ana¬ 
lytics  to  modify  its  marketing 
campaigns  on  the  fly,  based  on 
suggestions  derived  from  indi¬ 
vidual  customer  profiles. 

Mutual  of  Omaha  already 
uses  software  from  SAS  Insti¬ 
tute  Inc.  in  Cary,  N.C.,  to  do 
data  mining  and  customer  seg¬ 
mentation  work  that  can  help 
target  its  marketing  programs 
at  specific  groups. 

But  O’Donovan  said  the 
two  products  will  comple¬ 
ment  each  other.  While  the 
SAS  technology  addresses 
historical  trending,  E.pipha¬ 
ny’s  software  will  be  able  to 
help  call  center  workers  make 
marketing  decisions  when 
they’re  on  the  phone  with 
customers.  I 


Analytics  in  Action 

How  Honeywell  Aerospace’s  analytical  CRM  system  works: 

■  The  company  has  installed  Siebel’s  analytical  software  on  top  of  the 
vendor's  sales  force  automation  and  cal!  center  applications. 

■  The  analytical  tools  take  information  about  customers  from  the  Siebel 
applications  and  other  data  sources  within  Honeywell  Aerospace. 

■  The  tools  use  the  data  to  identity  sales  opportunities  or  customers  who 
are  likely  to  have  product  issues  and  should  be  contacted  proactively. 

■  Salespeople  access  the  information  through  a  Web-based  user  interface 
that  can  be  configured  to  suit  the  needs  of  individual  end  users. 
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Outsourcing  Debate 
Driven  by  Cost,  Agility 


IT  managers  find  offshore  outsourcing 
to  be  a  compelling  way  to  cut  costs 


BY  THOMAS  HOFFMAN 

SCOTTSDALE,  ARIZ. 

Cost  pressures  and 
the  need  for  in¬ 
creased 
business 

agility  are  leading  a 
growing  number  of 
companies  to  shift 
more  of  their  IT  work 
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offshore,  according  to  pan¬ 
elists  who  discussed  sourcing 
issues  at  the  Computerworld 
Premier  100  conference  here 
last  week. 

On  average,  60%  of  IT 
spending  now  goes  to  external 
companies  for  hardware,  soft¬ 
ware  and  services,  while  40% 
goes  to  staff,  said  Bart  Perkins, 
the  panel  moderator  and  man¬ 
aging  partner  at  Leverage 
Partners  Inc.,  a  Louisville,  Ky.- 
based  CIO  consulting  firm. 
The  percentage  of  external 
spending  will  continue  to 
grow  as  more  companies  turn 
to  offshore  outsourcing,  said 
Perkins,  who  is  also  a  Com¬ 
puterworld  columnist. 

That’s  the  trend  at  Agilent 
Technologies  Inc.,  a  spin-off 
of  Hewlett-Packard  Co.,  which 
outsources  about  35%  of  its  IT 
work.  Two  years  from  now,  it 
expects  to  outsource  about 
60%  of  its  IT  functions,  partic¬ 
ularly  in  areas  such  as  applica¬ 
tion  development  and  mainte¬ 
nance.  The  reason:  Seven  con¬ 
secutive  quarterly  losses  are 
driving  the  Palo  Alto,  Calif.- 
based  company  to  reduce 
costs  and  become  ever  more 
agile  in  the  market,  said  Marty 
Chuck,  CIO  at  the  scientific 
instrument  maker. 

The  cost  of  labor  in  places 
such  as  India  is  “too  com¬ 
pelling,”  said  Chuck,  referring 
to  a  figure  cited  by  Merrill 
T.ynch  &  Co.  Chief  Technology 
Officer  John  McKinley  in  an 
earlier  conference  session. 
McKinley  estimated  the  sav¬ 


ings  from  offshore  outsourc¬ 
ing  of  IT  at  40%  to  50%. 

Currently,  90%  of  Agilent’s 
IT  workforce  is  based  in  the 
U.S.  and  Europe.  By 
2005,  Chuck  sees 
that  ratio  flipping, 
with  just  30%  of 
the  IT  workforce 
remaining  in  the 


U.S.  and  Europe. 

Agilent  isn’t  alone.  A  few 
years  ago,  Northbrook,  111.- 
based  Allstate  Insurance  Co. 
created  a  wholly  owned  IT 
subsidiary  in  Northern  Ireland 
to  help  cut  IT  costs  and  allow 


faster  response  to  competitive 
pressures.  Even  with  900  high¬ 
ly  skilled  IT  employees  there, 
CTO  Cathy  Brune  finds  herself 
struggling  with  whether  to 
shift  operations  elsewhere. 

“Anytime  you  go  outside 
your  four  walls,  there’s  risk  as¬ 
sociated  with  it,”  said  Brune. 
“But  if  you  have  a  very  smart 
team,  you  can  figure  things  out 
and  learn  from  others.” 

“We’ll  be  doing  more  out¬ 
sourcing  in  the  next  two 
years,”  said  George  Lin,  vice 
president  and  CIO  at  Docu- 
mentum  Inc.,  a  Pleasanton, 
Calif. -based  enterprise  con¬ 
tent  management  software 
vendor.  Both  near-shore  and 
offshore  vendors  “are  becom- 


Microsoft  Security 
Czar  Critiques  Efforts 


Traffic  cop’  says 
company  making 
strides  toward  goal 

BY  MARK  HALL 

SCOTTSDALE,  ARIZ. 

Listeners  praised  Microsoft 
Corp.’s  recent  efforts  to  im¬ 
prove  product  security  and 
patch  management  after  hear¬ 
ing  Scott  Charney,  the  compa¬ 
ny’s  chief  security  strategist, 
describe  them  in  detail.  But 
they  agreed  that  Microsoft 
hasn’t  yet  shown  it  can  reach 
its  own  security  goals. 

Speaking  here  at  the  Com¬ 
puterworld  Premier  100  con¬ 
ference  last  week,  Charney 
explained  how,  as  part  of  its 
Trustworthy  Computing  ini¬ 
tiative,  Microsoft  delayed  the 
release  of  products  such  as 
Windows  2003  and  Visual  Stu¬ 
dio  .Net.  That  delay,  he  said, 
gives  developers  who  have 
been  trained  in  areas  such  as 
threat  modeling  and  penetra¬ 
tion  testing  a  chance  to  review 


the  software  code  for  flaws. 

The  company  also  added 
two  layers  of  security  verifica¬ 
tion  outside  of  the  product 
groups,  because  making  devel¬ 
opers  in  the  product  groups 
responsible  for  security  “was 
like  having  the  fox  guarding 
the  henhouse,”  Charney  said. 

And  despite  complaints 
from  some  corporate  users, 
Microsoft  products  will  now 
be  shipped  with  maximum 
security  features  turned  on, 
Charney  said. 
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BART  PERKINS  says,  on  average, 
60%  of  IT  spending  is  external, 


ing  more  savvy  about  under¬ 
standing  my  unique  business,” 
said  Lin.  That’s  one  reason  he 
expects  his  company  to  move 
a  growing  portion  of  its  soft¬ 
ware  quality  assurance  and 
maintenance  offshore. 

While  offshore  outsourcing 
might  be  attractive  from  a  cost 
standpoint,  there  are  wrench¬ 
ing  cultural  and  political  issues 


Those  moves  are  essential, 
according  to  Phil  Dunkelberg- 
er,  CEO  of  PGP  Corp.,  a  soft¬ 
ware  security  provider  in  Palo 
Alto,  Calif.  “Now  they  have  a 
guy  who  is  a  traffic  cop  who 
does  not  have  money  at  stake,” 
he  said  of  Charney. 

Dunkelberger  went  on  to 
praise  the  idea  of  shipping 
products  with  security  fea¬ 
tures  enabled  by  default. 
“Locking  down  products  when 
they’re  released  is  good,  even 
when  faced  with  resistance 
from  larger  users,”  he  said. 

But  he  expressed  disap¬ 
pointment  that  Charney  didn’t 
discuss  the  idea  of  opening 
up  the  security  elements  of 
Microsoft’s  products  to  open- 


www.computerworld.com 


that  IT  managers  have  to  iron 
out  with  domestic  IT  employ¬ 
ees.  “You  have  to  be  honest 
with  people  and  [tell  them] 
what  you’re  planning  on  do¬ 
ing,”  said  Brune.  It’s  also  im¬ 
portant  to  help  them  improve 
their  technical  skill  and  busi¬ 
ness  acumen  to  keep  them 
valuable  to  the  organization. 

Retaining  technical  knowl¬ 
edge  of  certain  technologies 
that  are  sent  offshore  is  a  must 
as  well,  said  Chuck.  “If  you 
don’t  retain  some  of  that 
knowledge  in-house,  it’s  al¬ 
most  cost-prohibitive  to  bring 
it  back  in,”  he  said. 

For  its  part,  Agilent  plans 
to  keep  people  with  business 
process  and  project  manage¬ 
ment  expertise.  In  addition,  it 
has  opted  not  to  outsource  its 
data  center  operations,  since  a 
recent  benchmarking  exercise 
revealed  that  Agilent  can  run 
its  back-office  operations  more 
cost-effectively  than  service 
providers  can.  I 


source  evaluation.  PGP’s 
source  code  is  released  for 
open-source  review  before  it’s 
sold  commercially. 

RA  Vernon,  chief  security 
officer  at  Reuters  America  Inc. 
in  New  York,  said  that  before 
Microsoft  can  achieve  the 
goals  of  its  Trustworthy  Com¬ 
puting  initiative,  “major  cul¬ 
tural  change  has  to  take  place” 
within  Microsoft. 

Charney  acknowledged  that 
that  was  true,  specifically  in 
relation  to  the  vendor’s  patch 
management  procedures, 
which  he  characterized  as 
“not  good  today  at  all.” 

He  said  Microsoft’s  decen¬ 
tralized  management  ap¬ 
proach,  while  “wonderful”  in 
many  respects,  is  an  impedi¬ 
ment  to  effective  patch  man¬ 
agement.  For  example,  the 
company  had  eight  patch  in¬ 
stallers,  and  some  tools  can’t 
determine  whether  a  patch  has 
been  installed  properly  or  not. 

That,  he  said,  will  change 
with  the  release  of  Longhorn, 
the  code  name  for  the  next  re¬ 
lease  of  the  Windows  operat¬ 
ing  system.  With  that  release, 
which  isn’t  expected  before 
mid-2004  at  the  earliest,  a  sin¬ 
gle  patch  installer  will  exist.  I 
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CIOs  Discuss  Strategies  for 
Demonstrating  Value  of  IT 


IT  chief  warns 
against  overselling 
projects  to  execs 

BY  THOMAS  HOFFMAN 

SCOTTSDALE.  ARIZ. 

CIOs  often  have  trouble  com¬ 
municating  to  senior  manage¬ 
ment  the  value  IT  investments 
can  deliver  to  their  organiza¬ 
tions.  After  an  upgrade  to  his 
company’s  global  network  in¬ 
frastructure  last  year,  Baxter 
International  Inc.  CIO  John 
Moon  decided  to  take  matters 
into  his  own  hands. 

After  the  networking  proj¬ 
ect  was  done,  Moon  handed 
each  of  the  business  leaders  at 
a  postproduction  senior  man¬ 
agement  meeting  a  yellow 
cable.  He  then  told  them,  “No 
matter  where  you  are  in  the 
world  [at  any  of  Baxter’s  300 
offices],  plug  this  into  the  wall, 
and  you’ll  be  connected”  to 


the  company’s  global  network. 

The  tactic  —  as  well  as  the 
message  —  “was  really  eye¬ 
opening  for  them,”  noted 
Moon,  whose  Deerfield,  111.- 
based  health  care  company 
has  a  $350  million  IT  budget 
for  2003. 

Moon  was  on  a  panel  of  IT 
leaders  who  discussed  IT 
investment  and  value  strate¬ 
gies  at  the  Computer-world 
Premier  100  conference  here 
last  week. 

At  Avon  Products  Inc.,  Se¬ 


nior  Vice  President  and  CIO 
Harriet  Edelman  has  squeezed 
business  value  out  of  optimiz¬ 
ing  systems  and  business  proc¬ 
esses  in  critical  areas  such  as 
procurement  and  merchandis¬ 
ing.  Those  moves  have  yielded 
$10  million  in  annualized  bene¬ 
fits  for  the  New  York-based 
beauty  products  giant,  she 
said,  thanks  in  large  part  to  her 
group’s  use  of  IT  portfolio 
management  techniques. 

Still,  Edelman  was  quick  to 
acknowledge  that  it’s  impor¬ 


tant  for  CIOs  and  other  IT 
leaders  to  avoid  being  arro¬ 
gant  or  evasive  when  it  comes 
to  communicating  the  value  of 
IT  to  senior  management. 

“It’s  an  area  that’s  rife  with 
some  danger,”  she  said. 

Even  when  IT  initiatives 
deliver  huge  returns,  Edelman 
said,  the  trick  is  to  “stay  hum¬ 
ble  and  stay  within  their  [busi¬ 
ness]  point  of  view.” 

CIOs  also  sometimes  make 
the  mistake  of  overselling  IT 
projects  to  top  brass,  Moon 
said.  That’s  one  reason  why 
Baxter  has  a  staff  member 
whose  role  is  to  communicate 
the  value  that  IT  can  deliver, 
he  said. 

Another  way  CIOs  can 
get  senior  management  to  in¬ 
vest  more  in  IT  is  by  collabo¬ 
rating  more  closely  with  busi¬ 
ness-unit  leaders  on  specific 
projects. 

By  persuading  her  business 
peers  to  take  the  lead  on  more 
IT/business  initiatives,  Edel¬ 
man  said  she  has  helped  in¬ 
crease  Avon’s  spending  on 
strategic  and  transformational 
IT  efforts  by  30%  during  the 
past  two  years.  ► 


Identify,  Kill  Nonessential 
Projects,  CIO  Recommends 


Narrow  focus  to  a 
few  issues,  he  says 

BY  JULIA  KING 

SCOTTSDALE.  ARIZ. 

If  he  were  writing  a  song  about 
his  first  18  months  in  the  top 
IT  post  at  BMC  Software  Inc., 
CIO  Jay  Gardner  might  call  it 
“I  Learned  It  the  Hard  Way.” 

Gardner,  who  spoke  last 
week  at  the  Computerworld 

!  Premier  100  conference  here, 

held  sales  and  operations  po¬ 
sitions  at  Houston-based  BMC 
before  becoming  CIO.  In  that 
post,  Gardner  said  he  had  to 
learn  from  his  mistakes. 

The  first  of  those,  he  said, 
was  trying  to  solve  too  many 
problems  at  the  same  time. 
Having  reviewed  a  2002  Gart¬ 
ner  Inc.  study  of  key  issues  on 
CIOs’  minds,  Gardner  took  a 
crack  at  more  than  a  dozen  — 


JAY  GARDNER  chose  three  top 
issues  to  address  at  BMC. 


too  many,  as  it  turned  out.  He 
soon  switched  gears  and  took 
direct  aim  at  the  top  three  is¬ 
sues:  aligning  IT  and  the  busi¬ 
ness,  providing  guidance  and 
leadership  about  technology 
to  top  executives,  and  proving 
IT’s  value. 

“These  are  absolutely  the 


top  three  things  to  worry 
about,”  Gardner  told  a  packed 
breakout  session  titled  “IT 
Governance  and  Organization¬ 
al  Effectiveness.” 

“It’s  not  so  much  about  the 
IT  organization,  but  about 
how  I  personally  spend  my 
time,”  he  said.  How  and  where 
CIOs  spend  their  time  will  re¬ 
flect  directly  on  their  success 
in  meeting  their  top  three 
challenges,  he  added. 

Topping  the  issues  on  which 
Gardner  said  he  spends  the 
most  time  are  IT  governance, 
people  and  resources  manage¬ 
ment,  and  IT  architecture. 
Rounding  out  the  list  are  busi¬ 
ness  alignment  and  services 
management. 

“When  all  five  of  these  are 
working  together,  you  can 
drive  good  alignment  and  IT 
value,”  he  said. 

Among  the  key  challenges 
Gardner  faced  when  he  came 
into  the  CIO’s  job  was  priori¬ 
tizing  the  various  IT  projects 
under  way  at  the  software 
maker.  A  companywide  survey 
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showed  that  128  different  proj¬ 
ects  were  already  in  progress, 
many  of  which  had  no  busi¬ 
ness  owner  and  no  return  on 
investment  attached  to  them. 

His  advice  to  other  CIOs: 
“Find  stuff  not  to  do.  Cross  off 
projects  from  the  list.” 

One  of  Gardner’s  key 
achievements  so  far  has  been 
repositioning  IT  workers  to 
work  on  projects  for  which 
they  have  the  necessary  skills. 

“Fifteen  months  ago,  we 
took  a  skills  inventory  and 
found  that  we  had  a  lot  of  tal¬ 
ent  that  was  not  being  used  by 
people  in  their  current  jobs,” 
he  said.  BMC  redeployed 
workers  accordingly,  boosting 
morale  in  the  process.  I 


“I  think  the  single 
biggest  threat  to  my 
environment,  and 
probably  to  my  job  as 
well,  is  the  dual  threat 
of  data  security  and 
data  privacy.” 

DOUG  LEWIS,  EXECUTIVE 
VICE  PRESIDENT  AND  CIO.  SIX 
CONTINENTS  HOTELS  INC. 


“I  can  be  in  Redmond 
in  two  hours.  I  know 
where  I’m  going  and 
know  who  to  yell  at.” 

DAMIEN  BEAN,  VICE  PRESIDENT 
OF  CORPORATE  SYSTEMS.  HILTON 
HOTELS  C0RP.,  ON  WHY  HE  FAVORS 
MICROSOFT  OVER  LINUX 


“Windows  has  gotten 
so  robust  as  to  cut 
out  low-end  Unix. 

And  not-so-low-end.” 

ROGER  J.  JONES.  CIO. 

F0RTIS  HEALTH 


“I  fired  my  top 
15  managers.” 

BILL  FARROW,  EXECUTIVE 
VICE  PRESIDENT  AT  THE  CHICAGO 
BOARD  OF  TRADE.  ON  HOW  HE 
CONVINCED  BUSINESS  EXECS 
THAT  HE  WAS  SERIOUS  ABOUT 
TURNING  AROUND  IT 
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MARYFRAN  JOHNSON 


Keeping  the  Faith 


w 


HEN  WILL  THE  accelerating  pace  of 
change  finally  overwhelm  us? 

That  one  question  —  and  the  as¬ 
tonishing  answer  —  will  resonate 


with  me  long  after  the 
end  of  Computerworld’ s 
Premier  100  IT  Leaders 
Conference,  which  drew 
more  than  500  CIOs, 

CTOs  and  senior  IT  man¬ 
agers  to  Arizona  last 
week  [QuickLink  a!660]. 

When  Andre  Mendes, 
chief  technology  integra¬ 
tion  officer  at  PBS,  posed 
that  question,  77%  of  the 
audience  replied,  “Never.” 

Now  that’s  faith  in  IT. 

And  in  people.  I  take  that  as  a  most 
welcome  sign  in  these  trying  times. 

It’s  also  one  of  the  distinguishing 
characteristics  of  true  leaders  — 
something  called  “adaptive  capaci¬ 
ty,”  as  Warren  G.  Bennis,  one  of  our 
keynote  speakers,  so  aptly  put  it. 

The  best-selling  author  of  On  Be¬ 
coming  a  Leader  and  distinguished 
management  professor  at  the  Uni¬ 
versity  of  Southern  California 
earned  a  prolonged  standing  ovation 
from  our  assembled  IT  leaders  after 
his  talk  about  what  makes  a  true 
leader  [QuickLink  36647]. 

I  can’t  do  justice  to  his  speech  in  a 
few  sentences,  but  Bennis  said  the 
six  core  competencies  that  people 
want  in  their  leaders  are  direction, 
trust,  acknowledgment,  hope,  op¬ 
portunity  for  personal  growth  and 
results.  “A  sense  of  We  can  do  it!’  ” 
is  something  leaders  communicate 
to  everyone  around  them,  he  said. 

Indeed,  faith  in  IT  is  the  tie  that 
binds  us  in  this  industry.  And  I  saw 
constant  signs  of  hope  and  determi¬ 
nation  at  our  gathering  of  IT  lead¬ 
ers.  In  one  of  our  audience  polls 
about  IT  cost-cutting,  for  example, 
43%  said  they  were  focusing  more 
on  new  projects  that  will  grow  the 
business  than  on  ways  to  cut  further. 

In  my  closing  remarks  at  the  con- 
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ference,  I  borrowed 
some  observations  from 
a  September  2002  col¬ 
umn  by  Computer-world's 
Frank  Hayes,  titled  “The 
Faith  of  IT”  [QuickLink 
32660].  The  heart  of  his 
column  is  about  what  IT 
people  really  believe  in, 
and  Frank’s  thoughts  are 
well  worth  paraphrasing: 


You  believe  in  prog¬ 
ress,  technology,  infor¬ 
mation  and  business. 

You  believe  that  new  ideas  and 
fresh  approaches  can  be  better  than 
old  ways  and  that  technology  can 
be  used  to  make  individuals  more 
powerful  and  organizations  more 
effective. 

You  believe  that  we  can  use  tech¬ 
nology  to  store  and  process  infor¬ 
mation,  but  also  to  discover  new  in¬ 
formation  we  didn’t  know,  to  see 
patterns  we  didn’t  recognize  before. 

You  believe  in  communication 
and  how  it  can  bring  people  togeth¬ 


er  to  cooperate  or  compete. 

You  believe  that  IT  can  bridge  dif¬ 
ferences,  level  inequalities  and  offer 
opportunities. 

You  believe  in  the  new,  the  unfa¬ 
miliar,  the  different.  (Even,  on  occa¬ 
sion,  the  overhyped  and  the  un¬ 
proven.) 

But  most  of  all,  you  believe  in 
progress  and  change,  that  things  can 
and  will  get  better.  That  over  time, 
our  companies,  our  industries,  even 
our  societies,  can  be  transformed  by 
IT.  So  if  you  believe  we  can  solve 
our  problems,  then  you  believe  in 
the  future. 

You  believe  that  we  can  and  will 
change  the  world. 

Frank’s  words  remind  me  of  one 
of  the  greatest  teachers  I’ve  ever 
known,  who  urged  his  students  to 
“Go  out  and  move  the  world  an 
inch.”  That  takes  more  than  hard 
work,  more  than  technology  or  busi¬ 
ness  expertise,  even  more  than  an 
adventurous,  determined  spirit. 

It  takes  faith  that  what  you’re  do¬ 
ing  makes  a  difference.  Everything  I 
saw  and  heard  last  week  among 
hundreds  of  your  colleagues  tells 
me  that  you  are  out  there,  moving 
the  world  an  inch  at  a  time. 

Keep  the  faith.  I 
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PIMM  FOX 

Fight  Threats 
From  Within 

YOU  CAN’T  PREDICT  a 
security  disaster,  but 
you  can  prepare  for 
one.  The  recent  revelation 
that  an  intruder  stole  more 

than  8  million  Visa,  MasterCard, 
American  Express  and  Discover  credit 
card  account  numbers  should  fan  the 
flames  about  the  limits  of  IT  security. 

That’s  because  even  the  best  IT  se¬ 
curity  works  only  up  to  a  certain  level. 
Once  past  that  level,  your  defenses 
will  be  breached,  either  by  a  technical 
gaffe  or  a  human  miscreant.  When 
that  happens,  you  must  be  able  to  put 
into  action  a  preparedness  plan. 

The  plan  should  include  the  active 
participation  of  your  corporate  com¬ 
munications,  legal  and  customer  rela¬ 
tions  departments  as  well  as  your  ex¬ 
ecutive  committee.  In  the  wake  of  a 
breach,  these  people  will  all  be  turn¬ 
ing  to  you,  the  IT 
folks,  to  tell  them 
what  went  wrong 
and  what  you’re  do¬ 
ing  to  fix  the  prob¬ 
lem.  They’ll  also  be 
asking  you  for  dam¬ 
age  assessments  and 
reports  on  third-par¬ 
ty  contacts  (because 
so  much  security 
work  has  been 
farmed  out,  to  white- 
hat  hackers,  for  ex¬ 
ample).  For  these  and  other  reasons, 
you  must  have  an  internal  and  exter¬ 
nal  communications  plan  ready  for  se¬ 
curity  failures. 

Before  you  ever  have  a  security 
breach,  assemble  the  core  group  of 
specialists  who  are  trained  and  pre¬ 
pared  to  deal  with  IT  security  as  part 
of  their  job.  Determine  who  among 
them  are  best  suited  to  communicate 
internally  with  users,  externally  to 
customers  and  suppliers  and,  possibly, 
even  to  the  media.  Then  train  them. 
And  have  backup  ready  in  case  your 
spokesmen  are  away  when  a  crisis  is 
upon  you. 

Prepare  procedures  to  alert  these 
key  contacts  on  what  information  will 
be  available,  how  to  get  it  and  who  will 
be  responsible  for  it.  Make  sure  there’s 
a  process  for  vetting  information. 

Match  the  information  with  the  au¬ 
dience.  In  the  recent  breach,  the  credit 
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card  companies  didn’t  publicly  reveal 
the  name  of  the  payment  processor 
whose  security  was  compromised,  but 
surely  the  necessary  people  inside  the 
credit  card  companies  were  briefed  in 
detail.  Remember  that  responding  to 
a  security  breakdown  is  an  informa¬ 
tion  problem  as  well  as  a  technical 
problem.  Who  you  tell  and  what  you 
tell  them  is  as  important  as  who  does 
the  telling. 

In  addition,  security  failures  can 
quickly  raise  legal  liability  issues,  as 
many  financial  service  companies  and 
health  care  providers  have  come  to 
recognize.  So  it’s  of  paramount  impor¬ 
tance  for  your  company  to  speak  with 
a  chorus  of  coordinated  voices. 

A  good,  well-tested  plan  will  protect 
your  company  against  charges  of  ig¬ 
noring  a  threat  and  make  it  easier  to 
withstand  a  crisis  when  it  occurs.  ► 

MICHAEL  GARTENBERG 

Blogging 
For  Fun  and 
Profit 

F  I  WERE  REMAKING  The 
Graduate  today,  with 
Dustin  Hoffman’s  charac¬ 
ter  as  an  IT  professional  who 
was  looking  to  advance  his 

career,  the  one  word  of  advice  I  would 
give  him  would  be:  weblogs. 

Weblogs,  those  personal  journals 
and  information  sites  that  are  growing 
by  leaps  and  bounds  on  the  Internet, 
are  a  simple  way  for  an  IT  department 
to  create  some  positive  momentum 
for  itself  quickly  and  cheaply.  Web¬ 
logs,  or  blogs  as  they’re  usually  called, 
allow  for  easy,  direct  and  effective 
communication  to  a  wide  audience. 
Most  important,  the  cost  of  starting  an 
internal  blog  project  is  ridiculously 
low.  Most  blogging  software  can  be 
acquired  on  a  trial  basis,  so  you  can 
test  to  your  heart’s  content,  and  pur¬ 
chase  costs  are  moderate  as  well. 
Here’s  how  to  get  started  creating  a 
corporate  blog  site. 

First,  think  “modest”  and  “discreet.” 
While  I’d  love  to  see  the  CEO  of  every 
company  keep  a  public  weblog  (imag¬ 
ine  reading  what’s  going  on  in  the 
mind  of  Steve  Ballmer,  Scott  McNealy 
or  Carly  Fiorina),  that’s  not  likely  to 
happen  in  the  near  future.  In  fact,  I’d 
caution  you  about  creating  a  blog  site 
that  can  be  viewed  by  the  outside 


world  (or  even  keeping  a 
personal  weblog  that  refers 
to  your  company’s  activi¬ 
ties)  without  first  going 
through  a  very  thorough  re¬ 
view  process  internally. 

There  are  already  tales  of  a 
number  of  good  people 
who  have  lost  jobs  because 
of  corporate  discussions  on 
their  weblogs. 

Instead  of  going  for  the 
full  corporate  monty  from 
the  start,  first  launch  an  in¬ 
ternal  IT  blog.  Start  slowly, 
as  you  would  with  any  IT 
project.  Create  a  beta  blog 
that  can  be  viewed  only  by  IT  man¬ 
agers,  then  open  it  to  IT  staffers  be¬ 
fore  you  roll  it  out  to  the  entire  com¬ 
pany.  Get  a  group  of  folks  to  volunteer 
to  create  your  first  series  of  weblogs 
and  use  the  beta  process  to  weed  out 
the  ones  who  don’t  post  often  enough. 


Nothing  is  worse  than  a 
stale  blog. 

Use  your  blog  as  a  vehi¬ 
cle  for  communication.  Ex¬ 
plain  what’s  going  on  in¬ 
side  IT  operations,  link  to 
interesting  articles  and 
create  forums  for  internal 
discussions.  While  every¬ 
one  is  comfortable  using 
PCs  and  most  software, 
they  still  appreciate  getting 
timely  advice  and  opinions 
from  experts  in  the  field. 
Why  shouldn’t  they  get  it 
from  you  and  your  team? 
During  the  beta  process, 
post  at  least  three  times  a  week,  keep¬ 
ing  your  comments  pithy  and  focused 
on  a  single  point.  Don’t  make  it  avail¬ 
able  to  the  entire  firm  until  you  have 
at  least  one  month’s  worth  of  content. 

Once  your  blog  is  established  and 
you  begin  to  find  your  voice,  you 


might  want  to  advocate  an  external 
site.  Explore  how  blog-based  external 
communications  can  create  more  busi¬ 
ness  initiatives.  Lead  by  example,  and 
champion  the  cause.  Along  the  way, 
there’s  a  good  chance  for  you  to  suc¬ 
ceed  and  become  a  hero.  That’s  about 
as  good  as  it  gets  for  IT  these  days. 

Communication  via  blogging  is  a 
powerful  tool  that  truly  leverages  the 
power  of  the  Web.  In  fact,  I  liked  this 
idea  so  much,  I  did  exactly  what  1  out¬ 
lined  above  and  helped  launch  Jupiter 
Research’s  first  weblogs  at  http:// 
weblogs.jupiterresearch.com.  Check 
them  out  and  send  me  some  feedback, 
but  more  important,  go  download 
some  software,  find  your  voice  and 
start  blogging  your  way  to  glory.  ► 
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Commit  to  R0I,  IT 

KNOW  THAT  MARK  HALL  was 

trying  to  stimulate  thought  by  tak¬ 
ing  a  contrarian  position  in  his  col¬ 
umn  “Forget  R0I”  [QuickLink 
35575]  -  at  least  I  hope  that's  what 
he  was  doing  -  but  he  is  way  off 
base.  I  agree  that  pure  R0I  has 
some  shortcomings  in  evaluating 
and  prioritizing  IT  projects  and  can 
cause  opportunities  to  be  lost.  The 
problem  is  that  pure  R0I  doesn’t 
have  a  way  to  quantify  a  lot  of  the 
benefits  that  “your  instincts,  knowl¬ 
edge  and  experience"  tell  you  will 
come  from  a  particular  IT  initiative. 
And  trying  to  quantify  the  benefits, 
costs  and  risks  associated  with  an 
IT  commitment  is  the  only  way  to 
bring  a  level  of  discipline  to  what 
has  been  a  hit-or-miss  proposition 
based  on  gut  feelings. 

Many  ROI-based  efforts  come 
up  short  because  people  aren’t  will¬ 
ing  to  put  a  value  on  the  benefits 
that  will  be  achieved  by  making  the 
IT  commitment.  I  was  around  in  the 
1970s  when  people  were  installing 
Wang  word  processors,  and  they 
were  basing  their  decisions  on  im¬ 
proved  productivity  and  quality. 
Same  thing  with  PCs  in  the  1980s. 
Why  are  so  many  companies  mov¬ 
ing  to  Linux  servers?  Better  price/ 
performance  and  reliability.  All  of 
these  decisions  were  based  on 
committing  IT  resources  to  produce 
real  business  value.  The  problem 
isn't  with  R0I  -  it  is  that  people  are 


afraid  to  put  down  on  paper  what 
the  IT  effort  should  produce  in  the 
way  of  business  value.  Once  com¬ 
panies  understand  how  to  show  the 
real  business  value  that  can  be  cre¬ 
ated  with  their  IT  efforts,  I  believe 
ROI-type  factors  will  actually  en¬ 
courage  enterprises  to  make  more 
commitments  to  IT. 

Bruce  Skaistis 
President,  eGlobal  CIO, 

Tulsa,  Okla. 

ARK  HALL’S  COLUMN  is  a 

perfect  example  of  IT  staff  ar¬ 
rogance  and  just  one  of  the  reasons 
real  business  people  have  a  low 
opinion  of  IT  people.  The  average  IT 
staffer  has  no  idea  what  makes 
sense  to  the  business  organization. 
Hall  proves  this  with  his  comment 
about  R0I  and  Wang  word  proces¬ 
sors.  A  significant  R0I  was  very 
easy  to  prove  on  Wang  installations. 
It  has  always  been  the  stance  of  IT 
staff  that  they  don’t  need  to  justify 
their  favorite  projects.  That’s  why 
the  graveyard  of  failed  projects  is 
so  large. 

Andrew  H.  Olson 

Managing  director,  TEAM 
International  Group,  Gaines¬ 
ville,  Fla. 


Always  Encrypt 

WHY  WASN’T  THE  DATA  that 
was  compromised  at  Data 
Processors  International  stored  in 
an  encrypted  format  [“System 


Break-in  Nets  Hackers  8  Million 
Credit  Card  Numbers,”  QuickLink 
36530]?  In  writing  databases  to 
store  personal  information  for  my 
company,  it  never  occurred  to  me 
to  store  the  data  in  an  unencrypted 
format  (public  key/private  key).  I  set 
up  an  XML  format,  then  encrypt  it, 
then  store  it.  If  it’s  transmitted  to  a 
database  server  from  a  Web  server, 
it’s  encrypted  before  it  goes  to  the 
database  server.  It’s  never  decrypt¬ 
ed  until  it’s  time  to  view  it. 

Curtis  Maurand 
Network  engineer,  Prexar 
LLC,  Portsmouth,  N.H. 


Offshore  Security 

AS  I  READ  about  the  intent  of 
many  companies  to  engage  in 
offshore  outsourcing  [“Companies 
Expected  to  Boost  Offshore  Out¬ 
sourcing,”  QuickLink  36377],  I  have 
to  ask  why  there  isn’t  more  solid  in¬ 
formation  being  reported  on  the 
data  security  issues  that  could 
arise.  It  seems  to  me  that  offshore 
data  centers  might  have  the  poten¬ 
tial  for  educating  the  wrong  people. 
Ben  McCullom 
Chestnut  Ridge,  N.Y. 


Firewalls  and  SIP 

Although  the  feb.  3  Quick- 
Study,  “Session  Initiation  Pro¬ 
tocol”  [QuickLink  35318],  suggest¬ 
ed  otherwise,  interoperability  be¬ 
tween  equipment  is  quickly  and 


fairly  easily  corrected  within  the  SIP 
community,  so  that’s  not  causing 
much  deployment  delay.  As  for 
concerns  that  SIP  will  make  net¬ 
works  more  vulnerable,  the  source 
may  be  the  firewall  and  NAT  (Net¬ 
work  Address  Translator)  issue.  SIP 
communication  doesn’t  traverse 
most  installed  firewalls  and  NATs. 

Several  methods  and  equipment 
have  been  suggested  to  solve  this 
problem,  but  the  most  general  one 
is  to  eliminate  the  problem  where  it 
occurs,  in  the  firewall  itself.  Fire¬ 
walls  that  include  a  SIP  server  that 
dynamically  controls  the  firewall 
have  been  available  for  over  a  year, 
and  since  they’re  no  more  expen¬ 
sive  than  ordinary  firewalls,  they 
should  be  considered  for  all  new  in¬ 
stallations. 

Karl  Erik  Stahl 

President,  Intertex  Data  AB, 

Stockholm, 

karl.stahl@intertex.se 

CQMPUTERWORLD  welcomes 
comments  from  its  readers.  Letters 
will  be  edited  for  brevity  and  clarity. 
They  should  be  addressed  to  Jamie 
Eckle,  letters  editor,  Computerworld, 
P0  Box  9171, 500  Old  Connecticut 
Path,  Framingham,  Mass.  01701. 
Fax:(508)879-4843. 

E-mail:  letters@computerworld.com. 
Include  an  address  and  phone  num¬ 
ber  for  immediate  verification. 

OMore  letters  on  these  and  other 
topics  are  on  our  Web  site: 

computerworld.com/letters 


MICHAEL  GARTENBERG  is 
research  director  for 
the  Client  Access  and 
Technologies  group  at 
Jupiter  Research  in 
New  York.  Contact  him 
at  mictmel_gartenberg@ 
mindspring.com. 


li 


iSJt 

^Wt/er< 

sr 


OgA.Mti'j 

14$A 


■ 

-•  V;  :-  ,-  . 

W0WW0^%^:^:j^_ 

iliilifillistfte  ■  & 
■MHWj 
**..■  ■  '* 
fB:/  £ ;?:  ft  ft  ft 

B:iJ'  V>'V 


H 


d  &aftware  from  Microsoft ; 
business.  A  premium  global  brand,  Volvo  Cars  operated  sites  in  dozens  of 
countries.  With  each  country  managing  its  own  site  locally,  their  Web  sites 
were  inconsistent  and  changes  were  difficult  to  implement.  With  plans  to 
localize  volvocars.com  for  more  than  40  markets,  they  turned  to  Microsoft 
Content  Management  Server,  which  let  them  centralize  management  of 
all  their  sites  to  ensure  uniform  branding.  Yet  it  allowed  content  owners 

worldwide  to  Quickly  update  their  own  sites  with  local  information  in  their 

, 

own  language.  And  IT  stays  contentedly  on  top  of  it  all. 


■  200 'j  Microsoft  Corporation.  All  rights  reserved.  Microsoft  is  a  registered  trademark  of  Microsoft  Corporation  in  the  United  States  and/or  other  countries,  ''he  names  of  actus!  companies  and  logos  mentioned  herein  may  he  the  trademarks  of  their  respective  owners. 
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.NET  connected  software  from  Microsoft  helps  you  make  content  management 
more  manageable.  With  every  change  in  your  business  needs  come  demands  for  more 
Web  sites,  more  content,  and  a  faster  response  from  already  strained  IT  resources.  To 
find  contentment  in  this  setting,  consider  Microsoft*1  Content  Management  Server.  With 
native  support  for  XML,  it  integrates  with  your  existing  and  future  applications  to  create  a 
centralized  infrastructure  for  publishing  content  to  intranet,  extranet,  and  Internet  sites. 
You  control  site  consistency,  while  empowering  content  owners  to  publish  their  own  pages. 
So,  you  can  be  more  responsive  with  fewer  resources.  And  everyone  is  content. To  get 
a  technical  overview,  visit  microsoft.com/content  (Software  for  the  Agile  Business?) 
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For  further  information, contact: 
NTT  Communications  Corporation, 
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Wisdom 

Something  you  can  expect  from  our  vast  experience. 

NTT/VERIO  IP  and  managed  network  services  are  comprehensive  and  sophisticated. 

But  what  do  we  offer  that’s  different?  One  thing  is  the  wisdom  that  comes  with  the  vast  experiences 
of  covering  nearly  90  countries  around  the  globe.  It’s  a  wisdom  that  helps  our  customers  sustain  their  success. 
From  IP  connectivity  and  managed  network  to  a  range  of  hosting  services,  we  offer  everything 
you  need  to  thrive  in  our  networked  economy.  By  using  the  NTT/VERIO  global  services, 
you  will  be  working  with  a  partner  that  has  complete  control  over  their  network  and  is  completely 
accountable  for  its  consistent  and  reliable  performance.  Which,  we  feel,  is  only  wise. 

www.nttverio.com 


NTT  Communications  Group  Offices  japan  •  usa  •  Brazil  •  uk 

Korea  •  China  •  Hong  Kong  •  Taiwan  ®  Vietnam  •  Thailand  •  Indonesia  •  Singapore 

NTT  is  a  trademark  of  NIPPON  TELEGRAPH  AND  TELEPHONE  CORPORATION.  Verio  is  a  trademark 
trademarks  of  their  respective  owners.  ©2003  NTT  Communications  Corporation 


•  France  •  Germany  •  Netherlands  «  Spain  • 

•  Malaysia  •  Philippines  •  Sri  Lanka  •  Australia 

A  full  service  offering  may  not  be  available  in  some  areas, 
of  Verio  Inc.  All  other  referenced  product  names  are 
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•  -  they  might  as  well  be  here. 


It’s  a  place  to  go  when  workers 
can’t  go  to  work. 


Business  continuity  plans  rarely  plan  on  an  emergency  closing 
your  office  or  building.  A  SunGard  Information  Availability  strategy 
does.  We  can  place  your  people  immediately  at  our  over  15,000 
end-user  positions  in  up  to 
cities  -  all  convenient  to 
commercial  centers  and 
airports.  And  if  you  want  to  keep 
your  people  close,  we  can  even 

come  to  you.  With  39  fully-equipped  mobile  facilities,  we  have  the  most 
flexible  mobile  recovery  fleet  in  the  industry,  ready  to  roll  to  virtually 
any  location. 


Introducing  Information  Availability. 
It’s  business  continuity  and  more. 


It’s  not  just  about  protecting  data.  It’s  about  keeping  people 
connected  to  it  so  your  business  runs  uninterrupted,  24x7. 


Typical  business  continuity  solutions  go  to  great  depths  to  back  up  applications, 
networks  and  business-critical  information.  But  what  they  don’t  do  is  protect  your 
organization’s  access  to  it  all.  That’s  where  a  SunGard  Information  Availability 
strategy  comes  in. 

Information  Availability  goes  beyond  business  continuity  by  combining  technology, 
redundant  infrastructure  and  technical  expertise  to  keep  your  people  and  information 

connected,  no  matter  what.  When  you  understand 
the  many  ways  disconnects  can  happen,  you’ll  see 
why  Information  Availability  is  the  best  way  to 
prevent  them.  Business  continuity  plans  may 
incorporate  one  or  more  of  the  following  features, 
but  only  a  SunGard  Information  Availability  strategy 
offers  all  of  these  from  one  source. 


It’s  replication  of 
your  IT  system. 


Nobody’s  IT  network  of  operating 
systems,  servers  and 


software  works  quite 
like  yours.  SunGard’s 
Information  Availability 
program  can  provide 
you  with  an  optimally 
configured,  perfectly 
maintained  and 
scalable  system,  pre¬ 
tested,  ready  and 
waiting  to  continue  your  critical 
business  processes  at  a 
moment’s  notice. 


It’s  confident  customers, 
always  in  contact  with  you. 


Disaster  could  well  strike  your 
company.  But  with  an  Information 
Availability  plan  from  SunGard, 
your  customers  may  never  know  it. 
SunGard  can  help  you  engineer 
a  solution  that  meets  your 
information  availability 
requirements. 


It’s  a  dedicated, 
redundant  network 
backbone. 

Every  SunGard  location  is 
connected  by  nearly  25,000 
miles  worldwide  of  dedicated 
network  backbone,  providing 
on-demand  or  dedicated 
DS1/DS3  protocol- 
independent 
communications. 


It’s  hardened  facilities  and  high-level  security. 

SunGard  maintains  more  than  3  million  sq.  ft.  worldwide  of 
strategically  placed,  hardened  facilities,  providing  you  with 
high  availability  to  your  information  and  virtually  no  downtime. 
Well-staffed  facilities  feature  fully  redundant  power  and 
communications,  state-of-the-art  equipment,  multi-platform 
compatibility  and  high  levels  of  security. 


It’s  off-site  data 
storage  that’s 
truly  off  site. 


Some  continuity  plans 
incorporate  in-house 
backup  tapes  and  stor¬ 
age.  But  they’re  useless 
in  a  power  failure,  fire  or 
evacuation.  SunGard’s 
off-site  storage  is  a  key  part  of  Information  Availability.  Our 
file  sharing,  primary  storage  and  data  backup  services  are 
unrivalled  for  data  integrity  and  reliability.  And  they  free  up 
your  equipment  and  people  for  other  purposes. 


It’s  platform-independent  professionals 
bringing  it  all  together. 


With  SunGard,  more  than  2,000  Information  Availability  experts 
are  at  your  fingertips.  We  can  help  you  with  everything  from 
vulnerability  assessment  and 
impact  analysis  to  planning,  tech¬ 
nology  integration,  network  and 
architecture  solutions,  deployment, 
testing  and  certification.  Everything 
you  need  to  keep  your  business 
running,  no  matter  what. 


SUNGARD® 

Availability  Services 

The  Net  Beneath  You 


Don’t  let  lost  access  to  information  take  your  company  down. 
Stay  up  and  running  with  an  Information  Availability  strategy. 


OPIN 

Don' 


Talk  with  us.  An  Information  Availability  strategy  from  SunGard  can  be  a  life-saver  when  it 
comes  to  keeping  people  and  information  connected.  Data  is  more  time-sensitive  than  ever. 

And  SunGard’s  complete  continuum  of  services  can  protect  your  information’s  availability, 

enterprise-wide.  From  tiered  applications  recovered  as  fast  as 
48  hours,  to  high  availability  applications  in  as  little  as  2  hours, 
to  managed  services  that  provide  continuous  access  to  critical 
information. 

SunGard  offers  the  industry’s  most  comprehensive  Information 
Availability  services  -  from  planning,  traditional  disaster  recovery, 
network  and  managed  services  to  IT  outsourcing,  professional 
consulting  and  high  availability  solutions.  Plus,  end-user  recovery 
facilities  where  your  people  can  go  to  reconnect  with  data  in  an 
emergency.  In  fact,  nearly  90%  of  U.S.  companies  with  $1  million 
or  more  in  revenue  are  located  within  35  miles  of  one  of  our  facilities.* 
Every  day,  we  help  ensure  that  over  10,000 
clients  worldwide  have  uninterrupted  access  to 
their  business-critical  information.  They  count 
on  us  to  supply  the  people,  technology  and 
infrastructure  necessary  to  provide  multiple 
points  of  access  to  information,  flexible  alternate 
workplace  options  for  their  employees,  and 
updated  continuity  plans  and  systems  to  meet 
their  future  technology  needs. 

SunGard  is  one  of  the  largest  providers  of 
platform-independent  business  continuity, 
managed  hosting  services  and  more.  No 

company  has  more  ways  to  keep  your  business  in  business.  See  how  your  company 
rates  on  Information  Availability  right  now.  Take  our  Information  Availability  Challenge  at 

www.availability.sungard.com/iac 


'Source:  Dunn  &  Bradstreet’s  MDDI 


SunGard:  The  Net  Beneath  You. 

With  SunGard  you  get 

•  the  company  that  founded  the  recovery 
industry  in  1978 

•  comprehensive  support  for  more  than 
30  platforms 

•  75  facilities  in  10  countries  with  more  than 
15,000  end-user  positions  worldwide 


OPINION 

Don’t-Ask-Don’t-Tell  E-Commerce 

The  recent  theft  of  8  million  credit  card 
numbers  shows  why  credit  card  associa¬ 
tions  should  rethink  their  security  policies, 
says  Robert  L.  Mitchell.  Page  33 


EMERGING  TECHNOLOGIES 

Virtually  Face  to  Face 

IP-based  videoconferencing  is  fi¬ 
nally  taking  hold  as  corporations 
upgrade  their  WAN  infrastructures 
to  support  IP  telephony.  Page  30 


Wireless  Nets  Go  Regional 

use  the  same  spectrum  as  wireless 
LANs,  but  wide-area  wireless  net¬ 
work  technologies  can  bridge 
Ethernet  LANs  in  offices 
many  miles  apart.  Page  28 


AT  TOP  SPEED 

Straight-through  pro  j 
essing  means  that  finan-  | 
cial  services  firms  must  j 
move  to  all-digital  proc-  j 
esses  to  remain  competi-  j 
tive  and  connected.  j 
By  Lucas  Mearian  ! 


IN  THE  NAME  OF  STRAIGHT-THROUGH  PROCESSING 
(STP)  of  securities  trades,  financial  services 
companies  over  the  next  two  years  will  spend  an 
estimated  $6  billion  replacing  their  manual 
processes  by  plugging  into  virtual  trade-match¬ 
ing  utilities  (VMU),  installing  middleware  and 
integrating  front-  and  back-end  computer  systems. 

In  simple  terms,  STP  is  the  removal  of  manual 
processes  in  the  trade-processing  cycle,  including  pa¬ 
per  and  disparate  data  systems,  creating  an  unbroken 
electronic  stream  of  information  from  the  broker/ 
dealer  to  the  clearinghouse.  At  present,  much  of  the 
trades  process  still  relies  on  fax  or  telephone. 

STP  includes  messaging  standards,  translation 
middleware  and  electronic  connectivity  among  in¬ 
vestment  managers,  broker/dealers,  custodian  banks 
and  clearing  companies.  One  confusing  aspect  of 
STP  is  its  association  with  T+l,  or  trade  plus  one  day. 
T +1  refers  to  reducing  the  trade  settlement  cycle 
from  the  current  standard  of  three  days  to  one,  and 
it’s  dependent  on  STP’s  electronic  efficiencies. 

The  Securities  Industry  Association  (SIA),  an  in¬ 
dustry  group  with  offices  in  New  York  and  Washing¬ 
ton,  has  lead  the  charge  toward  STP  and  T+1.  But  the 
Sept.  11  terrorist  attacks  and  the  economic  downturn 
squelched  the  SIA’s  effort  to  move  to  T+l  by  2005,  as 
attention  and  budgets  turned  toward  more  critical 
needs  such  as  disaster  recovery,  business  continuity 
and  regulatory  compliance.  The  SIA  stated  in  July 
that  it  will  focus  on  promoting  STP  by  2004,  with  no 
deadline  for  T+1. 

The  real  incentive  to  move  to  STP,  the  SIA  argues, 
is  the  return  on  investment,  which  could  be  consid¬ 
erable  for  many  companies. 

For  example,  the  Northern  Trust  Corp.  in  Chicago 
went  live  in  August  with  an  e-mail  alert  system  that 
replaced  a  labor-intensive  fax  process  for  notifying 
investment  managers  of  corporate  actions  such  as 
mergers,  acquisitions  and  name  changes.  The  home¬ 
grown  technology,  called  Corporate  Action  Delivery 
and  Response  system,  took  a  year  to  develop  and 
cost  just  under  $10  million.  It  has  reduced  the  num¬ 
ber  of  employees  required  for  data  input  by  up  to 
70%  and  improved  productivity  by  50%  to  60%,  says 
Teresa  Parker,  who  is  responsible  for  securities  and 
banking  operations  worldwide  at  Northern  Trust. 

The  Web-based  e-mail  system  runs  off  a  Sun  So¬ 
laris  server,  while  production  data,  including  ac¬ 
counting  programs,  runs  off  IBM  iSeries  and  zSeries 
mainframes.  The  Web-based  e-mail  application  is  a 
proprietary  program  based  on  Java.  It’s  used  for 
sending  securities-related  data  to  fund  managers, 
who  are  online  using  either  the  Society  for  World- 

Continued  on  page  24 


A  POLICE 
ICER. 


f  HAVE  X-RAY  VISION.  I  HAVE  THE  POWER  TO  SEE  A  BANK  ROBBERY 
FROM  ACROSS  TOWN.  I  HAVE  THE  POWER  TO  SEE  HOW  MANY  PEOPLE 
ARE  ROBBING  THE  BANK.  I  EVEN  HAVE  THE  POWER  TO  SEE  WHICH  ONE 
IS  WEARING  THE  SKI  MASK.  I  AM  MORE  THAN  A  POLICE  OFFICER. 


I  AM  A 
NETWORK. 

I  AM  THE  X-RAY  GLASSES.  I  AM  A  WIRELESS  NETWORK.  I  HAVE 
THE  POWER  TO  SEND  VIDEO  AND  DATA  WITHOUT  THE  USE  OF  WIRES. 

I  HAVE  THE  POWER  TO  LINK  A  BANK'S  SURVEILLANCE  CAMERA  TO  A 
SQUAD  CAR  EN  ROUTE  TO  A  ROBBERY.  I  HAVE  THE  POWER  TO  SHOW 
COPS  WHAT  THEY'RE  UP  AGAINST.  I  AM  HERETO  PROTECT  AND  SERVE. 
I  AM  MORE  THAN  A  NETWORK. 


cisco.com/powernow 


©  2003  Cisco  Systems,  Inc.  All  rights  reserved.  Catalyst.  Cisco.  Cisco  Systems.  Cisco  IOS.  and  the  Cisco  Systems  logo  are  registered  trademarks  or  trademarks  of  Cisco  Systems.  Inc.  and/or  its  affiliate 

other  countries. 


STP  Pays 
Off  for  Fleet 

FleetBoston  Financial  Corp.  launched  one  of 
the  industry’s  first  Internet  links  for  high-value 
money-market  and  mutual-fund  customers,  cre¬ 
ating  an  electronic  straight-through  process 
connecting  its  front-  and  back-end  systems. 

FleetBoston  partnered  with  Bonaire  Soft¬ 
ware  Solutions  LLC  to  develop  the  application, 
which  lets  investors  order  trades  online  and  lets 
traders  and  salespeople  view,  approve  or  reject 
customer  orders  through  an  electronic  link  to  a 
trade  blotter.  It  then  sends  approved  trades  di¬ 
rectly  to  multiple  record-keeping  and/or  proc¬ 
essing  systems.  Both  FleetBoston  and  Bonaire 
are  based  in  Boston. 

FleetBoston  replaced  a  manual  process, 
which  required  customers  to  call  in  to  find  out 
what  their  position  was  on  any  given  day  and 
what  excess  cash  they  had  in  their  accounts. 

Since  the  Web-based  portal  was  launched  in 
February  2002,  the  number  of  money-market 
and  mutual-fund  accounts  has  tripled.  Large 
volumes  of  trades  that  normally  took  an  hour  to 
process  now  take  less  than  five  minutes,  says 
Dean  Richmond,  a  senior  systems  manager  at 
FleetBoston.  Thirty-one  percent  of  FleetBos- 
ton’s  mutual  fund  and  money  market  cus¬ 
tomers,  or  470  users,  access  their  accounts  at 
least  once  per  day  via  the  system. 

Richmond  said  the  system  took  about  a  year 
and  a  half  to  build  but  didn’t  require  replacing 
any  existing  systems.  “It  involved  taking  existing 
legacy  systems  and  giving  them  the  ability  to 
talk  to  a  Web  application.  We  had  to  build  a  lot 
of  APIs  [application  programming  interfaces] 
and  make  sure  that  process  was  hardened  and 
redundant,”  says  Richmond.  The  system  almost 
immediately  paid  for  itself  through  time  savings 
and  customer  retention,  he  adds. 


Continued  from  page  21 
wide  Interbank  Financial  Telecommu¬ 
nications  (SWIFT)  industry  messaging 
standard  or  Northern’s  Web-based 
product. 

“Before,  it  took  10  people  to  process 
1,000  trades  a  day,  and  now  it  takes  four  people,” 
says  Parker.  But  there  is  risk  involved  in  moving  to 
an  all-electronic  process.  “If  you  get  a  trade  wrong, 
the  most  you’re  going  to  pay  for  is  the  lost  interest 
on  the  trade.  If  you  get  a  corporate  action  wrong, 
you  might  have  to  sell  a  security  you  got  by  mistake. 
That  could  be  17  cents,  or  it  could  be  millions  of  dol¬ 
lars,”  she  says. 

IT  managers  say  that  the  benefits  of  STP  outweigh 
the  risks.  A  move  to  an  all-electronic  flow  of  infor¬ 
mation  allows  managers  and  broker/dealers  to  see  a 
stock  price  first  and  react  to  it,  which  can  translate 
into  increased  profitability  and  improved  customer 
service,  according  to  Larry  Tabb,  an  analyst  at  Tow- 
erGroup  in  Needham,  Mass.  Electronic  systems  also 
require  fewer  salespeople,  who  are  normally  busy 
writing  down  orders  and  having  staff  keypunch  in¬ 
formation  into  back-end  systems.  STP  also  helps  re¬ 
move  errors  from  orders  that  in  a  manual  process 
can  be  entered  at  any  point  as  orders  move  internally 
and  externally  from  a  fund  manager  or  retail  broker 
to  a  custodian  bank  and  a  clearinghouse. 

Integrating  Internal  Systems 

Because  banks  work  with  multiple  brokerages  to  au¬ 
thorize  the  release  of  funds  that  are  used  to  cover  se¬ 
curities  trades,  the  manual  approval  processes  used 
today  can  take  several  days  to  clear  even  one  trade. 

“Firms  use  multiple  systems,  and  not  all  of  them 
are  linked  together.  The  issues  have  to  do  with  link- 
ing  all  the  systems  together  so  transactions  flow 
from  one  to  another  with  no  one  handling  it.  There 
are  snafus  everywhere  along  the  line,”  says  Tabb. 

Internal  message  standards  for  cash  reporting, 
bulk  payments,  investment  funds,  securities  pretrade 
processes  and  customer-to-bank  credit  transfers  are 
virtually  nonexistent,  say  analysts. 

Applications  and  messaging  systems  within  securi¬ 
ties  firms  and  banks  weren’t  created  with  consistent 
architectures,  so  middleware  is  needed  to  send  data 


STRAIGHT  TALK 

For  additional  information  on  the 
need  for  messaging  standards,  visit: 

OQuickLink  36685 

www.computerworld.com 


This  example  shows  how  an  STP  system  facilitates  real-time  matching  of  data  throughout  the  trade  life  cycle.  The  process  starts  with  the  initial  trade 
agreement  between  the  broker  and  investment  manager;  the  subsequent  settlement  agreement  involving  the  executing  broker,  clearing  brokers  and 
custodian  banks:  and  the  actual  settlement  with  the  depository.  The  matching  utility  sends  pending  settlement  instructions  to  the  depository,  so  each 
agent  doesn't  need  to  do  so  in  a  separate  transaction. 
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from  one  message  format,  such  as  the 
Financial  Information  Exchange  (FIX) 
protocol,  to  back-end  systems  that  may 
use  proprietary  formats. 

Generally,  high-value  customers  — 
those  who  trade  more  than  $100,000  a 
day  —  call  brokers  or  sales  representatives  on  a  trad¬ 
ing  desk  to  check  their  account  balances,  stock  hold¬ 
ings  and  what  excess  cash  they  might  have  to  invest. 
Sales  representatives  then  write  up  order  tickets  by 
hand  and  fax  them  to  an  operations  department, 
where  someone  else  keys  in  the  order  into  back-office 
systems.  Those  orders  then  have  to  be  reconciled  be¬ 
tween  the  front  and  back  office  to  make  sure  all  the 
tickets  were  received  without  any  missed  trades. 

Virtual  Matching  Utilities 

One  key  issue  for  all  companies  participating  in  se¬ 
curities  trading  is  connectivity  to  nascent  VMUs, 
such  as  Boston-based  Omgeo  LLC  and  the  Zurich- 
based  Global  Straight-Through  Processing  Associa¬ 
tion.  Matching  in  posttrade  message  instructions  at 
one  centralized  data  center  creates  an  unbroken  flow 
of  electronic  data  between  financial  services  firms. 

Matching  utilities  are  basically  trading  traffic  man¬ 
agers.  They  use  large  servers  or  mainframes  and  com¬ 
mon  messaging  formats  based  on  XML  to  allow  bro¬ 
ker/dealers  and  investment  managers  to  communi¬ 
cate  with  one  another  and  assemble  the  many  pieces 
of  data  required  for  a  trade  to  be  confirmed  before 
being  sent  on  for  settlement  by  a  custodian  bank. 

Royal  London  Asset  Management  has  been  inte¬ 
grating  back-office  systems  for  about  a  year  and 
plugged  into  Omgeo’s  Central  Trade  Manager 
(CTM)  VMU  about  three  months  ago.  Before  that, 
the  London-based  bank  was  taking  an  average  of  20 
hours  to  get  confirmation  of  a  trade,  according  to  Ju¬ 
lian  Baines,  Royal  London’s  investment  servicing 
manager,  who  oversaw  the  deployment  of  Omgeo’s 
technology  at  his  company.  The  same  process  now 
takes  three  hours,  he  says. 

Also,  prior  to  using  Omgeo,  Royal  London’s  fund 
managers  input  data  onto  databases  that  were  trans¬ 
ferred  daily  in  batch  mode  to  a  back-office  system, 
where  the  trades  were  physically  examined  by  clerks 
on  the  company’s  settlement  team.  Those  clerks  in 
turn  printed  an  electronic  confirmation  and  used 
that  to  discover  exceptions  or  mistakes. 

“Fifty  percent  of  those  orders  were  failing  on  poor 
allocation  data,  poor  information  to  brokers  or  vice 
versa,”  says  Baines,  who  adds  that  errors  were  virtu¬ 
ally  eliminated  with  the  new  electronic  messaging 
system.  Royal  London  uses  an  application  program¬ 
ming  interface  gateway  device  on  an  existing  Win¬ 
dows  NT  server  that  translates  code  from  its  Thom¬ 
son  Financial’s  Icon  investment  management,  valua¬ 
tion  and  accounting  system  into  Omgeo’s  CTM. 

“Because  our  back-end  database  was  from  Thom¬ 
son,  they  did  the  integration  work,”  Baines  says.  The 
connection  into  Omgeo’s  CTM  took  about  a  year. 

The  greatest  hurdle,  as  Baines  puts  it,  was  under¬ 
standing  “the  new  jargon.”  Royal  London  has  linked 
eight  of  its  highest-volume  brokerages,  with  four 
more  in  the  pipeline.  “That  would  give  us  60%  of  our 
volume,”  Baines  says.  “Once  we  hit  that,  we’ll  be 
looking  to  increase  it  and  have  all  60  brokerages  on 
by  the  end  of  the  year.”  I 
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WfftELESS 

NETS  GO 
REGIONAL 

Wide-area  wireless  networking 
systems  can  provide  a  cost- 
effective  alternative  to  leased  lines 
for  Internet  access  or  metro-area 
connectivity  By  Bob  Brewin 


The  unlicensed  portion 
of  the  U.S.  radio  frequency 
spectrum  represents  just 
one-tenth  of  1%  of  the  total 
bandwidth  allocated  for 
communications,  but  this 
thin  slice  has  made  the  cur¬ 
rent  boom  in  wireless  LANs 
possible.  Because  WLANs 
use  the  free  spectrum,  companies  can 
set  them  up  without  the  hassle  or  ex¬ 
pense  of  going  through  the  Federal 
Communications  Commission’s  licens¬ 
ing  process. 

But  WLANs  aren’t  the  only  network¬ 
ing  technologies  leveraging  the  free 
spectrum.  Corporations  are  also  using 
fixed  wireless  systems  and  services  from 
wireless  service  providers  to  extend 
connectivity  beyond  the  LAN. 

Fixed  wireless  systems  use  the  same 
2.4-  and  5-GFiz  bands  used  by  WLAN 
products.  But  highly  focused  direction¬ 
al  antennas  support  wide-area  connec¬ 
tions  over  distances  measured  in  miles, 
rather  than  the  hundreds  of  feet  WLAN 


devices  cover.  Fixed  wireless  devices 
let  enterprises  tie  together  regional  or 
metro-area  office  buildings  using  a 
privately  owned  and  operated  broad¬ 
band  network.  The  systems  can  sup¬ 
port  point-to-point  Ethernet  bridging 
or  IP-based  multipoint  packet  routing. 
And  some  products  also  offer  a  sepa¬ 
rate  T1  channel,  eliminating  the  need 
to  lease  physical  T1  circuits  for  digital 
voice  traffic. 

Companies  that  don’t  want  to  set  up 
their  own  systems  may  find  similar 
wireless  offerings  from  service  pro¬ 
viders.  A  new  breed  of  wireless  Inter¬ 
net  service  providers  (ISP)  uses  the 
unlicensed  frequency  band  to  offer 
last-mile  broadband  services  at  rates 
lower  than  those  that  telephone  com¬ 
panies  charge  for  comparable  leased- 
line  services.  Service  providers  offer 
data  rates  ranging  from  a  few  hundred 
kilobits  per  second  to  54M  bit/sec.  or 
more.  And  in  some  remote  locations, 
as  well  as  in  parts  of  some  metropoli¬ 
tan  areas,  wireless  ISPs  are  the  only 
broadband  alternative. 

Building  a  Network 

York,  Pa.-based  Kinsley  Inc.  opted  for  a 
fixed  wireless  WAN  that  serves  1,500 
workers  in  multiple  locations.  Patrick 
Kinsley,  a  project  co-coordinator  at  the 
construction  and  commercial  property 
management  firm,  says  the  company 
had  to  accommodate  large  data  files 
generated  by  computer-aided  design 
(CAD)  workstations,  as  well  as  growing 
voice  traffic.  It  also  needed  a  way  to 
connect  telephone  and  computer  sys¬ 
tems  in  office  trailers  at  construction 
sites  into  back-end  systems  more 
quickly  than  the  several  weeks  it  took 
to  provision  lines  from  the  local  tele¬ 
phone  company. 

Business  Information  Group  (BIG), 
the  York-based  systems  integrator  that 
hosts  Kinsley’s  data  center,  designed 
the  fixed  wireless  network,  which 
serves  1,500  workers  in  eight  locations. 
Some  22  other  companies  housed  in 
buildings  Kinsley  manages  also  pay  to 
use  the  system.  This  helped  shave 
Kinsley’s  cost  in  building  the  network, 
says  John  Dolmetsch,  BIG’s  president 
and  CIO.  The  wireless  network  con¬ 
sists  of  a  high-speed  backbone,  with 
secondary  spurs  fanning  out  to  other 
offices  at  speeds  ranging  from  284K  to 
24M  bit/sec. 

Kinsley  routes  all  voice  traffic  from 
IP  and  digital  phones  over  its  wireless 
IP  backbone.  Digital  phone  signals 
are  converted  to  IP  at  remote  switches. 
All  voice  traffic  terminates  in  IP  trunk 
cards  in  a  private  branch  exchange 
from  Nortel  Networks  Ltd.  The  switch 


can  handle  up  to  336  concurrent  voice- 
over-IP  sessions,  Dolmetsch  says. 

Kinsley’s  wireless  network  uses 
Tsunami  point-to-point  and  point-to- 
multipoint  wireless  networking  equip¬ 
ment  from  Proxim  Inc.  in  Sunnyvale, 
Calif.  Tsunami  operates  in  the  5.8-GHz 
unlicensed  frequency  band  and  inter¬ 
connects  backbone  locations  at  speeds 
up  to  24M  bit/sec.  The  network  also 
uses  BreezeAccess  II  2.4-GHz  wireless 
equipment  from  Alvarion  Inc.  in  Carls¬ 
bad,  Calif.,  to  provide  connectivity 
with  smaller  locations  and  remote  job 
sites  (see  diagram). 

The  equipment  is  installed  on  five 
towers  within  a  30-mile  radius  around 
York,  each  no  farther  than  10  or  12 
miles  from  an  office  location,  Dol¬ 
metsch  says.  Kinsley  completed  the 
fixed  wireless  backbone  in  2001  and 
has  continued  to  add  office  locations. 

Dolmetsch  estimates  the  system’s 
five-year  return  on  investment  at  70% 
when  calculated  against  the  cost  of  the 
voice  and  data  circuits  it  replaced.  Sav¬ 
ings  on  phone  charges  alone  have  been 
$3,500  per  month,  he  says.  The  wire¬ 
less  equipment  cost  about  $200,000. 

Todd  Carothers,  an  analyst  at  The 
Telnecity  Group  LLC  in  San  Jose,  says 
the  size  and  scope  of  the  Kinsley  wire¬ 
less  WAN  is  unusual.  “I’ve  never  heard 
of  [a  wireless  WAN]  by  one  company  as 
extensive  as  this,”  he  says. 

The  Hotel  Wireless 

Rather  than  install  a  private  fixed  wire¬ 
less  system,  Kevin  Lanigan,  vice  presi-. 
dent  and  general  manager  of  the  Stan¬ 
ford  Park  Hotel  in  Menlo  Park,  Calif., 
contracted  with  a  service  provider. 

The  service  delivers  the  high  data  rates 
Lanigan  needs  to  support  guest  Inter¬ 
net  access  and  provides  variable  band¬ 
width  —  something  he  couldn’t  easily 
obtain  from  his  local  phone  company. 

The  hotel,  located  in  the  heart  of  Sil¬ 
icon  Valley,  hosts  large  meetings  for  lo¬ 
cal  high-tech  companies.  Those  guests 
require  bandwidth  for  meetings  that  it 
would  typically  take  multiple  T1  lines 
to  support.  Lanigan  initially  contacted 
the  local  exchange  carrier,  a  unit  of 
SBC  Communications  Inc.  in  San  An¬ 
tonio,  and  was  told  that  it  would  take 
60  to  90  days  to  install  such  circuits.  In 
contrast,  Next  Web  Inc.,  a  wireless  ISP 
in  Fremont,  Calif.,  provides  a  basic 
1.44M  bit/sec.  T1  circuit  from  a  small 
dish  on  the  hotel’s  roof,  and  it  can 
ramp  up  the  bandwidth  to  the  equiva¬ 
lent  of  multiple  T1  lines  in  one  day. 

David  Williams,  vice  president  of 
business  development  at  NextWeb,  says 
his  5-GHz  service  supports  speeds  from 
1M  to  10M  bit/sec.  Lanigan’s  T1  service 
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supports  WLAN  access  throughout  the 
163-room  hotel  —  a  service  for  which  it 
doesn’t  charge  guests  extra.  Nonethe¬ 
less,  Lanigan  says  the  broadband  wire¬ 
less  installation  has  paid  off:  The  hotel 
has  landed  “not  fewer  than  12  group 
bookings”  in  the  past  year  because  of 
its  ability  to  offer  such  connectivity. 

While  broadband  wireless  was  once 
viewed  as  ideal  for  rural  areas  with  lit¬ 
tle  telecommunications  infrastructure, 
Trent  Anderson,  CEO  of  wireless  ISP 
Sky  River  Communications  Inc.  in  San 
Diego,  says  that  even  in  densely  pop¬ 
ulated  areas,  there  are  pockets  not 
served  by  telephone  companies’  Digital 
Subscriber  Lines  or  fiber.  And  if  fiber 
connections  are  available,  they  are  of¬ 
ten  prohibitively  expensive,  he  says. 

Linda  Tucker,  co-founder  of  Aerial 
Access  LLC,  a  digital  aerial  photogra¬ 
phy  firm  in  San  Diego,  fell  on  the  other 
side  of  that  digital  divide.  Aerial  Access 
has  a  half  terabyte  of  stored  aerial  pho¬ 


tos  and  often  needs  to  send  10MB  or 
larger  image  files  to  prospective  custo¬ 
mers.  SBC  could  offer  only  fractional  Tl, 
at  a  cost  of  $350  per  month.  Sky  River 
charges  $149  per  month  for  a  512K  bit/ 
sec.  connection,  which  Tucker  says  is 
adequate  for  her  requirements.  “An  av¬ 
erage  file  between  3  and  10MB  transmits 
in  between  30  and  60  seconds,”  she  says. 

Growing  Pains 

Although  vendors  such  as  Proxim  and 
wireless  ISPs  such  as  Next  Web  and 
SkyRiver  have  established  a  fixed 
wireless  beachhead,  the  wireless  WAN 
market  is  still  in  its  infancy,  according 
to  Wai  Sing  Lee,  an  analyst  at  Frost  & 
Sullivan  Inc.  in  San  Antonio. 

Between  1,500  and  1,800  wireless 
ISPs  operate  in  the  unlicensed  spec¬ 
trum  band  today,  according  to  Daryl 
Schoolar,  an  analyst  at  In-Stat/MDR  in 
Scottsdale,  Ariz.  He  predicts  signifi¬ 
cant  growth  over  the  next  several 


years.  Free  spectrum  and  low-cost 
equipment,  at  about  $8,000  for  a  com¬ 
plete  base  station,  will  serve  as  the  dri¬ 
vers  for  this  growth,  he  says. 

But  analysts  and  wireless  ISPs  alike 
say  growth  could  be  inhibited  by  inter¬ 
ference.  The  2.4-GHz  band  is  already 
crowded,  and  the  same  may  happen  in 
the  5-GHz  band.  Next  Web’s  Williams 
says  interference  could  be  mitigated  by 
using  a  technique  called  dual  polariza¬ 
tion,  whereas  Carothers  at  Telnecity  en¬ 
visions  the  wireless  ISP  industry  devel¬ 
oping  a  self-policing  interference  body. 

Security  is  also  a  concern,  but  not 
as  much  with  fixed  wireless  as  with 
broadband,  since  fixed  wireless  uses  a 
narrow,  hard-to-intercept  transmission 
beam.  The  Proxim  gear  used  by  Kins¬ 
ley  adds  a  proprietary  encryption 
scheme.  Wireless  ISPs  like  SkyRiver 
build  in  additional  layers  of  security  as 
well,  including  a  Media  Access  Control 
layer.  They  also  offer  individual  ad¬ 


dresses  for  customer  equipment. 

But  even  though  the  industry  is  still 
evolving,  the  technology  is  stable.  Craig 
Mathias,  an  analyst  at  Farpoint  Group 
in  Ashland,  Mass.,  calls  fixed  wireless 
relatively  easy  to  install  and  operate. 

And  to  users,  it  seems  like  magic.  Jeff 
Leaf,  a  project  co-coordinator  at  Kins¬ 
ley-owned  LSC  Design  Inc.,  notes  that 
“when  you  tell  people  in  York  that 
you’re  doing  business  over  a  wireless 
network,  they  don’t  have  a  clue.”  When 
the  network  was  first  turned  on,  Leaf 
says,  he  marveled  at  the  speed  at  which 
his  CAD  files  were  transmitted.  Now  he 
doesn’t  think  about  the  network  or  its 
speed  at  all  —  a  sure  sign  that  the  tech¬ 
nology  has  gained  acceptance.  ► 
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Construction  firm  Kinsley 
created  a  wireless  WAN 
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Outlook:  As  corporations  upgrade 
infrastructures  for  IP  telephony, 
integrated  IP-based  videoconfer¬ 
encing  systems  are  starting  to 
proliferate.  By  Robert  L.  Mitchell 

VIDEOCONFERENCING  USed  tO 
require  users  to  adjourn  to 
specially  designed  rooms 
filled  with  complex  technolo¬ 
gy  that  worked  over  satellite, 
Integrated  Services  Digital  Network 
(ISDN)  or  other  private  network  ser¬ 
vices.  Such  systems  cost  upward  of 
$50,000  per  site.  But  no  more.  Com¬ 
pression  technology  has  improved,  de¬ 
sign  upgrades  have  cut  costs,  and  a 
new  generation  of  videoconferencing 
systems  designed  to  work  over  IP  net¬ 


works  as  well  as  ISDN  is  gaining  a 
foothold  in  corporations. 

“We  have  seen  a  heavy  shift  toward 
IP,”  says  Stacy  Saxon,  director  of  mar¬ 
keting  at  videoconferencing  vendor 
Polycom  Inc.  in  Pleasanton,  Calif.  She 
says  she  expects  75%  of  all  videocon¬ 
ferencing  systems  to  be  IP-based  with¬ 
in  the  next  three  years,  up  from  just 
25%  today.  Giga  Information  Group 
Inc.  in  Cambridge,  Mass.,  predicts 
18.9%  annual  growth  in 
videoconferencing  appli¬ 
ance  sales  through  2005. 

Several  developments  are 
driving  the  technology  for¬ 
ward.  IP-based  systems  eliminate  the 
need  for  ISDN  service,  which  can  be 
expensive  and  difficult  to  provision 
and  is  unavailable  in  many  locations. 
Unlike  those  based  on  ISDN,  IP-based 
systems  can  be  moved  to  any  office 
with  an  Ethernet  jack.  Corporations 
are  gradually  replacing  network  infra¬ 


structures  with  switches  and  routers 
that  support  quality-of-service  stan¬ 
dards  required  for  IP  telephony  and 
enable  clear,  jitter-free  video  services. 

“We’re  piggybacking  on  what  the 
company’s  doing  with  voice  over  IP,” 
says  Chris  Duncan,  global  leader  for 
e-communication  technology  at  The 
Dow  Chemical  Co.  in  Midland,  Mich., 
which  is  equipping  500  offices  world¬ 
wide  with  an  IP  videoconferencing 

system.  Ethernet  advances 
have  also  boosted  LAN 
bandwidth  to  Gigabit 
Ethernet  and  10  Gigabit 
Ethernet  speeds  that  can 
better  support  video  feeds.  And  busi¬ 
nesses  are  also  extending  those  high- 
bandwidth  connections  to  remote  of¬ 
fices.  “Getting  fairly  large  bandwidth 
isn’t  as  big  an  issue  as  it  was  four  or 
five  years  ago,”  Duncan  says,  citing  the 
current  glut  in  long-haul  fiber  capacity. 

Meanwhile,  bandwidth  requirements 
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Videoconferencing  systems  can  be  configured  to  run  over  private  IP  networks,  eliminating  the  need  to 
provision  ISDN  while  allowing  integration  with  Web  conferencing  and  other  IP-based  applications.  Over 
wide-area  connections,  a  VPN  is  often  implemented  for  increased  security.  Most  systems  also  support 
ISDN  links  for  background  compatibility.  Although  a  portion  of  the  ISDN  link  may  touch  the  IP  network,  the  ISDN  H.320  client  protocol  differs  substan¬ 
tially  from  the  H.323  connections  of  IP  users  and  doesn’t  present  security  issues  on  the  IP  network  segment,  according  to  Polycom. 
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Vendors  Jump  on  IP  Video  Bandwagon 


Videoconferencing  products  fall  into  two  categories: 

group/room  systems,  and  single-user  desktop  systems.  The 
endpoint  equipment  may  consist  of  a  stand-alone  appliance, 
or  it  may  connect  to  a  PC  using  a  Universal  Serial  Bus  port  or 
internal  add-in  card. 

Most  corporate  deployments  are  group  systems.  While  ap¬ 
pliances  are  easier  to  use,  PC-based  units  offer  better  integra¬ 
tion  with  Web  conferencing  features  such  as  application  shar¬ 
ing,  says  Giga  analyst  Elizabeth  Herrell.  Conferencing  with 
more  than  one  location  requires  a  multipoint  control  unit,  which 
acts  as  a  central  call  manager.  Vendors  also  offer  specialized 


software  that  handles  bandwidth  management  and  call  sched¬ 
uling  and  enables  the  creation  of  a  global  address  book. 

Prices  range  from  less  than  $5,000  per  site  for  a  system 
supporting  up  to  three  callers  to  $15,000  or  more  for  room 
systems  with  large  screens.  But  users  also  need  to  consider 
the  incremental  cost  of  upgrading  and  managing  a  more  com¬ 
plex  network  infrastructure  to  support  IP  videoconferencing, 
Herrell  notes.  All  systems  can  support  a  mix  of  ISDN  and  IP 
connections. 

While  at  least  10  vendors  offer  products  in  this  area,  three 
players  dominate,  Herrell  says. 

Sony  Business  Solutions  & 

Systems  Co. 

Park  Ridge,  N.J. 
http://bssc.sel.sony.com/ 
Professional/ 

Sony's  high-performance,  low-cost 
systems  have  sold  well  to  small  and 
midsize  businesses,  Herrell  says.  Its 
PCS-1600  series  set-top  units  start 
at  $3,394;  desktop  units  start  at 
$3,994.  On  the  high  end,  a  pack¬ 
aged  system  capable  of  supporting 
six  multipoint  sessions  sells  for 
$21,300. 


Polycom  Inc. 

Pleasanton,  Calif. 
www.polycom.com 

Polycom  has  more  than  two-thirds  of  the 
market  and  a  comprehensive  suite  / 
of  hardware  and  software  offerings,  f 
Products  include  the  $599  Via- 
Video  PC-based  single- 
user  system.  Pricing  for 
group  systems,  which 
include  the  ViewStation 
set-top  and  PC-based 
iPower  series,  start  at 
$3,999. 

- ► 

POLYCOM'S  IPOWER  9000 


Tandberg  Inc. 

Reston,  Va. 

www.tandbergusa.com 

Tandberg  focuses  on  the  high  end, 
offering  128-bit  Advanced  Encryp¬ 
tion  Standard  encryption  and  direc¬ 
tory  integration  via  the  Lightweight 
Directory  Access  Protocol.  Its 
integrated  2500, 7000  and 
8000  systems  start  at  $15,990 
per  site  and  go  up  to  $59,990. 
The  800  and  550  series  set-top 
units  start  at  $4,990  per  site.  Its 
1000  series  single-user  desktop 
units  start  at  $5,490. 


are  shrinking.  Video  encoders  now 
support  up  to  1,000-to-l  compression, 
delivering  acceptable  quality  in  as  lit¬ 
tle  as  128K  bit/sec.  per  connection. 
“It’s  good-quality  video,  if  you  don’t 
have  a  lot  of  movement,”  says  Saxon, 
although  Duncan  says  he  considers 
384K  bit/sec.  to  be  the  minimum  for 
acceptable  quality.  The  newest  stan¬ 
dard,  named  H.264  by  the  Geneva- 
based  International  Telecommunica¬ 
tion  Union  (ITU),  will  soon  deliver 
DVD-quality  video  feeds  using  less 
than  1M  bit/sec.  of  bandwidth. 

Videoconferencing  technology  is 
also  starting  to  converge  with  tradi¬ 
tional  Web  conferencing  systems,  al¬ 
lowing  IT  to  create  a  single  interop¬ 
erable  and  centrally  manageable  set 
of  applications  that  may  include  data 
sharing,  whiteboarding  and  stream¬ 
ing  media.  For  example,  Polycom’s 
Web  conferencing  software,  called 
WebOffice,  works  with  its  PC-based 
videoconferencing  systems.  And 
Web  conferencing  vendors  are 
adding  video  to  their  services,  al¬ 
though  analysts  say  quality-of-ser- 
vice  issues  will  keep  most  business 
videoconferencing  off  the  Internet. 

“Enterprise  users  are  primarily  us¬ 
ing  VPNs  [virtual  private  networks] 
and  dedicated  private  IP  networks  to 


ensure  the  quality  of  service,  which 
cannot  be  offered  by  the  public  In¬ 
ternet,”  says  Roopam  Jain,  an  analyst 
at  Frost  &  Sullivan  Inc.  in  New  York. 
And  while  some  quality-of-service 
standards  are  in  place  today,  analyst 
Lou  Latham  at  Gartner  Inc.  describes 
them  as  “fluid  and  incomplete.”  Net¬ 
work  administrators  still  worry 
about  reliability  and  performance,  he 
says.  “There’s  an  anxiety  on  the  part 
of  network  administrators  that  their 
networks  are  going  to  get  saturated,” 
he  says,  adding  that  the  key  is  to  keep 
traffic  segregated  and  prioritized  so 
it  moves  quickly. 

In  addition,  the  ITU’s  H.323  inter¬ 
face  standard  for  videoconferencing 
may  give  way  to  the  Internet  Engi¬ 
neering  Task  Force’s  evolving  Session 
Initiation  Protocol  (SIP).  That  could 
ease  integration  problems  when 
adding  audio  calls  from  voice-over-IP 


H  There’s  an  anxiety 
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that  their  networks  are 
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LOU  LATHAM,  ANALYST.  GARTNER  INC. 


telephony  systems,  which  use  SIP  or 
proprietary  protocols,  into  a  video- 
conferencing  session.  “That  wasn’t  a 
problem  with  ISDN,”  Duncan  says. 

Jain  says  videoconferencing  also 
continues  to  face  ease-of-use  issues. 
For  example,  users  may  need  to 
know  the  destination  IP  address  or 
phone  extension  to  establish  a  ses¬ 
sion.  Some  products  allow  the  cre¬ 
ation  of  an  address  book,  but  most 
can’t  access  information  already 
stored  in  an  Active  Directory  or  oth¬ 
er  enterprise  directory  infrastructure. 

Despite  its  limitations,  IP  video- 
conferencing  can  pay  off  in  organiza¬ 
tions  that  require  more  than  30  hours 
of  videoconferencing  per  month, 
says  Giga  analyst  Elizabeth  Herrell. 
Gartner’s  Latham  is  more  cautious. 
“You  can  start  by  keeping  your  ISDN 
lines  and  test  the  IP  waters,  connec¬ 
tion  by  connection,”  he  says.  He 
doesn’t  expect  end-to-end  reliability 
to  be  worked  out  until  next  year. 

But  Duncan  says  the  technology 
hurdles  are  surmountable.  “The  big¬ 
ger  challenge  is  getting  people  com¬ 
fortable  using  the  technology.”  I 


Russell  Kay,  a  freelance  writer  in 
Worcester,  Mass.,  contributed  to  this 
story. 


Videoconferencing 
Effort  Goes  Global 

Dow  Chemical  has  near¬ 
ly  completed  the  rollout 
of  IP  videoconferencing 
to  500  offices  world¬ 
wide  using  Polycom 
iPower  units,  and  it 
plans  to  eliminate  125 
ISDN-based  systems. 
CHRIS  DUNCAN,  global 
leader  for  e-communica¬ 
tion  technology,  spoke 
with  Computerworld' s  Robert  L.  Mitchell 
about  how  the  project  is  working  out. 


Q&A 


Why  did  you  pursue  IP  videoconferencing? 
One  reason  was  the  reliability  of  ISDN. 
Those  125  sites  were  in  40  countries,  and 
because  of  the  questionable  reliability  of 
ISDN,  it  was  never  fully  accepted  beyond 
an  executive  tool.  It  didn’t  become  part  of 
the  culture.  We  wanted  to  find  a  way  to 
expand  the  endpoints,  and  video  over  IP 
seemed  to  make  a  lot  of  sense. 

What’s  the  payback?  IP  is  significantly 
less  money[than  ISDN].  If  we’re  going 
from  the  States  to  Pacific  [Rim  countries, 
it  costs]  probably  75%  less.  We’re  using 
the  same  bandwidth  we  use  for  everything 
else.  We’ve  allocated  certain  percentages 
of  our  [wide-area  network]  bandwidth  to 
video  only.  It’s  the  same  pipe,  but  we've 
segmented  the  network.  We  have  three- 
quarters  of  our  deployment  done.  We’re  in 
18  or  19  countries  now. 

How  does  the  quality  compare  with  that  of 
ISDN?  We  had  been  running  our  IDSN  at 
128K  bit/sec.  Some  of  that  was  due  to 
cost.  When  we  decided  to  upgrade  with 
the  new  iPower  systems,  we  decided  that 
we  had  to  improve  not  only  the  reliability 
but  also  the  picture  quality.  We're  running 
384K  bit/sec.  It’s  a  minimum  of  three 
times  better.  There  is  some  jerkiness  in 
384K  bit/sec.,  but  it’s  not  as  annoying. 

Why  not  use  audioconferencing?  You  real¬ 
ly  need  to  have  some  face-to-face  to  read 
the  body  language  to  see  what’s  going  on. 
If  we  can  avoid  one  trip  per  month  per 
room,  the  entire  system  pays  for  itself. 

How  are  users  accepting  videoconferenc¬ 
ing?  We  haven’t  seen  a  notable  reduction 
[in  travel]  yet.  The  harder  part  is  the  cul¬ 
tural  change.  People  are  comfortable 
meeting  face  to  face.  When  you  put  a 
monitor  in  between,  you  have  to  focus  on 
the  cultural  changes.  There  are  certain  eti¬ 
quettes  that  are  different.  And  if  your  coil 
goes  down  for  two  minutes,  you  have  to 
understand  that  the  meeting  still  saved 
you  30  hours  [of  travel]. 


Recognize  any  of  those  issues?  Or,  perhaps,  all  of  them?  We  thought  so. 
Many  of  these  issues  can  be  related  to  your  legacy  desktop  software; 
fortunately,  many  of  them  can  be  addressed  by  features  in  Microsoft® 
Windows®  XP  Professional  and  Office  XP  Professional.  Want  specific 
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examples?  Windows  XP  Professional  offers  built-in  audio  and  video-con¬ 
ferencing  capabilities  that  make  the  whole  experience  easy  and  intuitive 
for  your  end  users.  With  the  Send  for  Review  feature,  Office  XP  Professional 
lets  users  easily  assign  roles  to  everyone  involved  in  the  document  review 


cycle,  while  automatically  providing  the  correct  tools  for  each  reviewer 
and  allowing  changes  to  be  easily  merged  back  into  the  original  document, 
And  finally,  several  new  features  make  deployment  easier  than  ever.  For 
more  ideas  about  managing  your  desktops,  visit  microsoft.com/desktop 
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Escape  From  SQL  Hell 


Quick  response  to  SQL  Slammer  deflects 
potential  disaster.  By  Mathias  Thurman 


Upfront  preparation 
helped  my  company 
ward  off  the  SQL  Slam¬ 
mer  worm,  which  ex¬ 
ploits  a  buffer  overflow  vul¬ 
nerability  in  Microsoft  SQL 
Server  and  creates  a  flood  of 
packets,  similar  to  a  denial-of- 
service  attack.  But  we  still 
didn’t  totally  avoid  it. 

Shortly  after  the  worm  ap¬ 
peared,  we  decided  to  run 
scans  of  our  infrastructure  to 
find  and  patch  vulnerable  sys¬ 
tems.  In  the  interim,  we  imple¬ 
mented  Cisco  Systems  Inc.’s 
Network-Based  Application 
Recognition  (NBAR) 
feature  on  our  core 
edge  routers,  config¬ 
uring  it  to  drop  any 
packets  that  matched 
the  signature  of  the 
SQL  Slammer  attack. 

The  problem  with 
NBAR  is  that  routers  are  de¬ 
signed  to  route  traffic,  not  in¬ 
spect  packet  payloads.  NBAR 
consumes  a  considerable 
amount  of  router  resources 
and  can  lead  to  performance 
problems,  so  we  didn’t  want  to 
keep  it  in  place  any  longer 
than  necessary. 

Notifying  Users 

Once  the  NBAR  rules  were 
set,  we  sent  out  a  mass  e-mail 
internally  with  a  link  to  a 
Web  page  we  had  assembled. 
The  page  contained  informa¬ 
tion  on  SQL  Slammer,  instruc¬ 
tions  on  determining  whether 
a  particular  system  is  vulnera¬ 
ble  and  a  link  to  the  patch, 
which  mitigates  the  vulnera¬ 
bility.  Only  after  we  had  com¬ 
pleted  our  scans  and  were  sat¬ 
isfied  that  our  SQL  servers 
and  other  impacted  desktops 
were  patched  did  we  remove 
NBAR. 

Ultimately,  we  were  lucky, 
but  we  weren’t  100%  success¬ 
ful.  A  few  stray  servers  were 
somehow  infected.  Even  a 
w'eek  later,  we  still  found  an 


occasional  system  that  had 
slipped  through  the  cracks. 

A  few  days  after  the  initial 
SQL  Slammer  incident,  I  re¬ 
ceived  a  call  from  our  net¬ 
work  operations  center  re¬ 
porting  that  our  servers  were 
under  a  denial-of-service  at¬ 
tack.  We  have  a  limited  capa¬ 
bility  to  monitor  bandwidth 
utilization  on  some  edge  net¬ 
work  devices.  Those  utiliza¬ 
tion  rates  were  extremely 
high,  and  network  perfor¬ 
mance  was  suffering.  So  we 
pulled  up  data  from  our  intru¬ 
sion-detection  system  sen¬ 
sors,  examined  the 
packets  and  discov¬ 
ered  an  excessive 
amount  of  file 
transfer  protocol 
traffic. 

It  turns  out  that 
our  company  had 
just  released  a  new  software 
download  that  was  in  excess 
of  40MB,  and  the  traffic  was 
overloading  our  network.  LTn- 
til  we  could  make  significant 
changes  in  our  systems,  we 
decided  to  outsource  the 
downloads  by  using  Cam¬ 
bridge,  Mass.-based  Akamai 
Technologies  Inc.’s  EdgeSuite 
service. 

The  implementation  went 
without  a  hitch.  With  a  few 
modifications  in  our  server 
configurations  and  some  redi- 
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rection,  we  were  ready  to  go. 

Eventually,  we  will  either 
upgrade  our  network  to  han¬ 
dle  the  load,  outsource  to  a 
managed  service  provider  or 
possibly  stick  with  Akamai. 

EDirectory  Assistance 

With  that  incident  out  of  the 
way,  I’ve  begun  searching  for 
an  easily  implemented,  inex¬ 
pensive  method  of  providing 
centralized  access  control  for 
our  Sun  Solaris  servers. 

In  the  past,  most  Unix  ad¬ 
ministrators  just  used  the 
Unix  Network  Information 
Service  (NIS).  Because  of 
some  vulnerabilities  in  NIS, 
however,  we  shied  away  from 
that  and  focused  on  tools  that 
would  integrate  with  our  Nov¬ 
ell  eDirectory  service.  We  use 
eDirectory  for  all  of  our  enter¬ 
prise  accounts  and  as  a  user- 
information  repository  for 
controlling  access  to  People- 
Soft,  Siebel  and  other  applica¬ 
tions.  The  new  system  must 
allow  central  control  of  user- 
name,  password  and  home- 
directory  information  through 
eDirectory  and  must  let  the 
administrator  dictate  the  log¬ 
in  shell  for  each  user. 

We  use  RSA  Security  Inc.’s 
SecurlD  tokens  for  two-factor 
authentication,  so  the  log-in 
shell  will  be  the  program  that 
activates  the  SecurlD  soft¬ 
ware.  After  some  research  and 
phone  calls,  we  decided  to  im¬ 
plement  a  Unix  pluggable  au¬ 
thentication  module  (PAM). 
Several  PAMs  are  available, 
depending  on  what  you  want 
to  integrate.  We  wanted  cre¬ 
dentials  stored  in  an  LDAP- 
compliant  database,  so  we 
used  the  PAM_LDAP  pro¬ 
gram.  For  this  to  work,  wTe 
needed  both  the  PAM  libraries 
and  the  LDAP  client  installed 
on  our  Solaris  servers. 

Unfortunately,  we  couldn’t 
get  the  native  Solaris  LDAP 
client  to  work  with  PAM  and 
properly  authenticate  to  our 
Novell  eDirectory.  Instead,  we 
had  to  use  a  third-party  LDAP 
integration  tool  developed  by 


Melbourne,  Australia-based 
PADL  Software  Pty.  The  PADL 
libraries  let  us  successfully 
direct  the  authentication  re¬ 
quests  to  eDirectory.  We  have 
conducted  some  preliminary 
testing,  and  almost  everything 
seems  to  work  as  advertised. 

One  issue  that  we’re  still 
trying  to  resolve,  however,  is 
establishing  encryption  be¬ 
tween  the  Solaris  resource  and 
the  eDirectory  server.  We  ini¬ 
tially  thought  that  we  could 
implement  Secure  Sockets 
Layer  encryption  for  this,  but 
it  had  problems.  We’re  now 
experimenting  with  the  IPsec 
protocol,  but  that  will  require 
additional  configuration  on 
each  Unix  resource  we  want 
to  protect. 

Adding  Features 

The  other  issue  we  face  is 
support  for  additional  fea¬ 
tures  outside  of  the  authenti¬ 
cation  portion  of  the  deploy¬ 
ment.  For  example,  we  might 
eventually  want  to  enable 
netgroups  (which  group  to¬ 
gether  machines  and  users 
with  identical  resource  ac¬ 
cess  rights  for  easier  adminis¬ 
tration)  and  Role-Based  Ac¬ 
cess  Control. 

When  using  PAM  and  the 
PADL  libraries  with  Solaris  2.8 
and  eDirectory,  we  can’t  con¬ 
figure  these  additional  fea¬ 
tures.  However,  we  know 
through  our  testing  of  Solaris 
9  and  Netscape’s  iPlanet 
LDAP  server  that  this  func¬ 
tionality  is  available.  So  in  the¬ 
ory,  it  should  work  with  the 
LDAP-based  Novell  eDirecto¬ 
ry.  Perhaps  I’ll  have  the  an¬ 
swer  by  next  time.  I 


WHAT  DO  YOU  THINK? 

This  week’s  journal  is  written  by  a  real 
security  manager,  "Mathias  Thurman," 
whose  name  and  employer  have  been 
disguised  tor  obvious  reasons.  Contact  him 
at  mathias_thurman@yahoo.com,  or  join  the 
discussion  in  our  forum: 

QuickLink  a1590 

To  find  a  complete  archive  of  our 
Security  Manager’s  Journals,  go  online  to 
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One  problem  we  discovered 
with  our  Cisco  wireless  LAN 
is  that  its  implementation  of 
Lightweight  Extensible  Access 
Protocol  (LEAP)  authentica¬ 
tion  works  only  with  Cisco’s 
wireless  PC  cards  and  soft¬ 
ware.  Meetinghouse  Data 
Communications’  Aegis  Client 
addresses  this  issue  by  provid¬ 
ing  LEAP  authentication  sup¬ 
port  that  works  with  most  ven¬ 
dors’  wireless  client  software. 

Our  installation  was  pain¬ 
less,  and  I  was  up  and  running 
with  LEAP  and  my  Proxim 
Orinoco  wireless  card  in  min¬ 
utes.  I  still  had  to  run  Proxim 
lnc.’s  client  software  and  then 
run  the  Aegis  Client  software 
on  top  of  that.  But  a  new  ver¬ 
sion  incorporates  client  soft¬ 
ware  and  LEAP  support  in  one 
package.  Pricing  starts  at 
$39.99  per  workstation. 

-Mathias  Thurman 


Certification  for 
Security  Managers 

The  Information  Systems  Au¬ 
dit  and  Control  Association  in 
Rolling  Meadows,  III.,  has 
launched  the  Certified  Infor¬ 
mation  Security  Manager 
(CISM)  certification.  CISM  is 
aimed  at  experienced  infor¬ 
mation  security  managers;  ap¬ 
plicants  must  have  three  years 
of  experience  and  pass  a  four- 
hour,  200-question  exam. 

For  more  information,  go  to 
www.isaca.org/cism.htm. 


Lindows  Antivirus 

San  Diego-based  Lindows.- 
com  Inc.  has  introduced  the 
first  antivirus  software  tuned 
specifically  for  Lindows,  its 
Linux-based  desktop  operat¬ 
ing  system.  The  new  software, 
VirusSafe,  is  based  on  Central 
Command  lnc.’s  Vexira  Anti- 
virus  for  Linux  Workstation 
software.  VirusSafe  sells  for 
$29,  which  includes  one  year 
of  virus-definition  updates. 
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Regis  McKenna 

Renowned 
Technology  Advisor 
Venture  Capitalist 
and  Author 


Ulrich  Seif 

SVP  &  CIO 

National  Semiconductor 


Steve  Romaine 

,  Chief  Architect 
#  The  Hartford 


David 

Chamberlain 

VP  Architecture  & 
Capacity  Planning 
Providian  Financial 


Infoftfortd 
Bio  IT  World 

DSstar 

INFOSTOR 

y  IT  Storoji  Online  _ 
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moreinformation  visitWWW.SnWUSa.COm/GXpO  OF  Call  1“800"883_9090  (i  508  8?o  8159) 
To  sponsor  and  participate,  call  Ann  Harris  at  1-508-820-8667 


Fran  Dramis 
CIO,  CHIEF  E-COMMERCE 
AND  SECURITY  OFFICER 

BELLSOUTH 


a  key  tool  to 
help  users 
understand  storage 
management ...” 


storage  networking 
conference  that 
delivers  it  all ...” 


Gary  Mountain 
MANAGER,  TECHNOLOGY 
SERVICES 

IDAHO  POWER 


Brian  Cobb 
VICE  PRESIDENT 
SYSTEMS  ENGINEERING 

FANNIE  MAE 


IT  Managers 
and  Executives 
Choose  SNW! 


”...  end-users  at 
SNW  learn  how  to 
maximize  storage 
investments  and 
understand  how 
to  efficiently  and 
effectively  manage 
storage ...” 


Find  the  World’s  Best 
Storage  Solutions  and 


STORAGE 

NETWORKING 

WO  RLD 

April  14-17, 2003 

JW  Marriott  Desert  Ridge  Resort 
Phoenix,  Arizona 

Co-owned  and  Produced  by:  Co-owned  and  Endorsed  by: 

CUMPUIBIWIIRLD 


Register  today  to  attend  the  world's 
premier  event  on: 

•  Storage  Management 

•  Enterprise  Infrastructure 

•  Business  Continuity 

•  Data  Management  and  Security 

•  Emerging  Technologies 


Are  you  wrestling  with  storage  and  data  management  in  today’s 
challenging  business  climate?  Is  your  infrastructure  under  increased 
pressure?  Are  business  continuity  worries  keeping  you  up  at  night? 
Then  attend  Storage  Networking  World  (SNW),  the  only  conference 


where  IT  Managers  and  professionals  get  an  SNIA-endorsed 
education,  a  hand’s  on  view  of  the  world’s  only  SNIA-sanctioned 
Interoperability  and  Solutions  Demo,  and  access  to  legions  of  peers, 
experts  and  solutions  you  won’t  find  anywhere  else. 


See  and  Hear  Regis  McKenna 
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Regis  McKenna 

Renowned  Technology  Advisor, 

Venture  Capitalist  and  Author 

New  Technologies  and  Industry  Standards: 
Separating  Hype  from  Reality 

Find  Out  How  CIOs  Are  Coping 

R?i 

Ulrich  Seif 

EVP  &  CIO 

National  Semiconductor 

See  the  World’s  Foremost  Storage 
Interoperability  &  Solutions  Demo! 


Hear  Real-World  User 
Implementation 
Case  Studies 

At  Storage  Networking  World,  you’ll 
see  IT  managers  and  professionals 
describe  how  they  implemented  key 
storage  technologies  in  today’s 
world.  You’ll  learn  from  their  valuable  lessons  and  have  an 
opportunity  to  network  with  them. 


Get  an  SNIA-Endorsed  Education 


•  A  Primer  delivering  basic  storage 
concepts,  terminology  and  busi¬ 
ness  applications. 

•  Exclusive  SNIA-produced  and 
Delivered  Tutorial  Sessions,  offer¬ 
ing  immediately  implementable 
tips,  tools  and  techniques  that  cover: 
•  Voice  of  the  User  and  Virtualization 


“Uniting  the  World  of  Storage” 


Do  you  have  the  cost-effective  infrastructure  to  support 
your  disaster  recovery  strategy?  Still  struggling  with 
interoperability  when  everyone  else  has  moved  on? 
Wonder  if  SNIA  technology  specifications  really  make  a 
difference?  Need  to  manage  more  storage  with  the 
same  fixed  resources?  Ready  for  iSCSI?  If  you 
answered  yes  to  any  of  these  questions,  then  you  need 
to  see  the  SNW  Interoperability  and  Solutions  Demo! 

In  “The  Demo”,  you’ll  see  over  50  SNIA  member 
companies  demonstrate  the  spectrum  of  solutions.  You'll  meet  the  experts,  get 
your  answers,  and  see  the  true  value  of  SNIA  technology  specifications  that 
reduce  risks,  increase  interoperability,  and  provide  common  foundations  to 
enable  vendor  choice.  And  you'll  see  the  latest  products  with  increased  storage 
per  square  foot,  new  tools  to  automate  management  and  to  span  more  vendors, 
plus  you’ll  see  iSCSI  in  action. 


•  Disaster  Recovery,  Backup/Restore  and  High 
Availability  Solutions 

•  Securing  and  Managing  Your  Storage  Networks 

•  Focus  on  Networking  Your  Storage 

•  Focus  on  Storage 


See  the  World’s  Largest  Storage 
Industry  Expo 

You'll  participate  in  live  demonstra¬ 
tions  and  meet  exhibiting  compa¬ 
nies  specializing  in  the  latest  data 
management  and  storage  network¬ 
ing  products  and  services. 


\ 


I 


For  more  information  and  to  register, 
visit  www.snwusa.com/expo  or  call  1-800-883-9090 

(1-508-820-8159) 


Witness  User  Case  Studies 


ROD  JULIAN  BILL  SIEVE 

LUCERO  MORRIS  WESTON  ROMA1NE 

Chief  Architect  Vice  President  of  IT  Risk  Manager  Chief  Architect 
Conseco  Finance  Draft  Worldwide  Fidelity  Investments  The  Hartford 


PIERRE  CHERYL  MO  DARYL 

BAUDET  GLORE  ASGARI  BLACK 

Business  Chief  Implementation  Vice  President  or  Storage  Architect 
Systems  Manager  Planner  Technology  Telus 

flew  Balance  Patrick  Air  Force  Photo  Channel  Communications 
Athletic  Shoe,  Ins.  Base,  45th  Space  Networks 
Communications 
Squadron 


GARY 

PILAFAS 

Senior  Storage 
and  Systems 
Architect 
United  Loyalty 
Services 
(United  Airlines) 


TOM 

RUWART 

Intelligent  Storage 
Technologist 
University  of 
Minnesota  Digital 
Technology  Center 


Hear  from  Industry  Leaders 


REGIS 

MCKENNA 


Renowned  Technology 
Advisor 

Venture  Capitalist  and 
Author 


PETER 

VANOPPEN 

Chairman  &  CEO 
ADIC 


YOGESH 

GUPTA 

CTO 

Computer  Associates 


STEVE 

DUPLESSIE 

Founder  and 
Senior  Analyst 
Enterprise  Storage 
Group 


HOWARD 

ELIAS 

SVP&GM,  Network 
Storage  Solutions 
Software 
Hewlett-Packard 
Company 


MIKE 

ZISMAN 


JOHN  FRED 

MCARTHUR  VAN  DEN  BOSCH 


Vice  President 
Corporate  Strategy 
IBM  Corporation 


Group  Vice  President 
SDC  Storage  Research 


EVP  &  CTO 
VER1 1  AS  Software 


Agenda  Snapshot" 


For  details,  updates,  and  to  register  visit  www.snwusa.corn/expo 


‘subject  to  change 


Monday,  April  14 

(Pre-Conference  Activity  and  Tutorial  Sessions) 
9:30am-11:00am  Primer 
12:00pm-5:00pm  Golf  Outing 
1:OQpm-2:Q0pm  SNIA  Tutorial  Sessions  - 

choose  from  five  different  sessions 
2:0Gpm-2:1Opm  Break 
2:10pm-3:10pm  SNIA  Tutorial  Sessions  - 

choose  from  five  different  sessions 
3:10pm-3:20pm  Break 
3:2Qpm-4:20pm  SNIA  Tutorial  Sessions  - 

choose  from  five  different  sessions 
4:20pm-4:30pm  Break 
4:30pm-5:30pm  SNIA  Tutorial  Sessions  - 

choose  from  five  different  sessions 
7:Q0pm-9:0Opm  Pre  Conference  Networking  Reception 


Tuesday,  April  15 

(Genera!  Conference  -  Day  One) 

7:15am-8:15am  Continental  Breakfast 
8:30am-9;15am  Opening  Keynote:  Regis  McKenna 
9:15amT2:O0pm  General  Sessions 
12:15pm-1:30pm  Networking  Luncheon 
1;45pm-4:00pm  General  Sessions 
4:00pm-5:30pm  Technical,  Technical/Business  and 
Business  Tracks 

5:30pm-8:30pm  Expo,  Buffet  Dinner,  Interoperability 
and  Solutions  Demo 

Wednesday,  April  16 

(General  Conference  -  Day  Two) 

7:15am-8:15am  Continental  Breakfast 
B:30am-9:05am  Opening  Keynote:  David  Chamberlain 


12:00 pmT:30pm  Expo,  Buffet  Luncheon 
12:00pm-7:15pm  Interoperability  and 
Solutions  Demo  Open 
1:45pm-3:50pm  General  Sessions 
3:50pm-4:00pm  Break 

4:00pm-5:00pm  Technical,  Technical/Business  and 
Business  Tracks 
5:15pm-7:15pm  Expo  Open 
7:30pm-9:00pm  Gala  Evening 

Thursday,  April  17 

(Tutorial  and  Workshop  Sessions) 

7:30am-8:30am  Continental  Breakfast 
8:30am-11:45am  Technical,  Technical/Business  and 
Business  Tracks 

11:45am  Conference  Concludes 


Register  Today! 

9:15am-12:Q0pm  General  Sessions 

Options  for  IT  End-Users* 

1  Pre-Registration  (through  April  11th) 

j  On-Site  Registration  (after  April  nth) 

General  Conference  Package  (Apr.  15, 16): 

(includes  Expo.  Meals  and  Receptions) 

$1,095 

$1,245 

Total  4-dav  Package  (Apr.  14, 15, 16, 17): 

$1,490 

$1,690 

(Includes  General  Conference  Package:  Technical  and  Business  Tracks:  SNiA-produced  Tutorials;  SMA-Certification  “Test-Ready"  Courses:  Expo,  Meals  and  Receptions) 

Options  for  IT  Vendors** 

Total  4-day  Package  (Apr.  14, 15, 16, 17):  51,490 

(Available  to  Sponsoring  Vendors  and  their  Resellers/Integrators;  industry  Consultants:  and  Storage  Solutions  implementors) 

$1,690 

Non-Sponsoring/Exhibiting  Vendor  Package: 

$5,000 

$5,000 

*  See  IT  End-Usere  description  on  the  Registration  Application  on  the  reverse.  "  See  Non-Sponsoring  Vendor  description  on  the  Registration  Application  on  the  reverse. 


iHBEST 

PRACTICES  IN 

STORAGE 


AWARDS  PROGRAM 
"%SfNA 


Submit  your  nomination  today  at 

www.snwusa.com 

or  email  Nanette  Jurgelewicz  at 
nanette  jurgelewicz®  computerworld.com 
. -r 


Travel  and 
Accommodations 


IDG  Travel  is  the  official 

travel  company  for  ^rrr.4  T...Vr? 

Storage  Networking 

World.  They  are  your  one-stop  shop  for 

exclusive  discounted  rates  on  hotel 

accommodations. 

To  reserve  your  accommodations: 

visit  www.etcentral.com  OR 

call  1-800-340-2282  (or  1-508-820-8159) 


Pre-Conference 
Golf  Outing 


Complimentary  tor  Registered  IT  Users 

The  Pre-Conference  Golf  Outing  at  The  Palmer 
Course  at  Wildfire,  located  at  the  JW  Marriott  Desert 
Ridge  Resort,  is  complimentary  ($165  value)  for  reg¬ 
istered  IT  End-Users  (other  participants,  including 
sponsors  and  vendors,  may  play  on  an  “as  available"  basis  and  are 
responsible  for  all  applicable  golf  outing  expenses). 

For  details:  contact  Chris  Leger  at  1-508-820-8277 


"...  I  found  storage 
solution  tips  in 
implementation, 
security,  continuity, 
and  interoperability 
that  made  my  trip 
worthwhile ..." 


Charles  Inches 
IT  DIRECTOR 
CORNER  BANCASA 
SWITZERLAND 


"...  the  best 
conference  for 
storage  users ...' 


Mike  Prince 

CIO 

BURLINGTON  COAT 
FACTORY 


“...  the  ideal 
resource  for 
storage  education 
and  training ...” 


Vicki  Hamilton 
VICE  PRESIDENT 
SHARED  SERVICES  AND 
IT  OPERATIONS 

THE  WEATHER 
CHANNEL 


' ■ 


“ ...  a  user-centric 
conference  where 
state-of-the-art 
technology  and  new 
storage  developments 
are  on  display ...  “ 


Geoffrey  Moore 
AUTHOR.  "CROSSING  THE 
CHASM" 

CHAIRMAN  AND  FOUNDER 
THE  CHASM  GROUP 
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April  14*17, 2003 

JW  Marriott  Desert  Ridge  Resort 
Phoenix,  Arizona 
www.snwusa.com 

Co-owned  &  Produced  by: 

C0MPUTERW0RLD 

Co-owned  &  Endorsed  by: 

^sSNIA 


Application  for  Conference  Registration 


TO  REGISTER: 

•  Fax  this  form  to  508-626-8524 

•  Or  register  online  at  www.snwusa.com/expo 

•  You  will  receive  a  confirmation  via  email 


QUESTIONS? 

•  Call:  our  Customer  Service  Line  at  800-883-9090 

•  Email:  snwreg@compirterworld.com 


CODE:  EXPO 


Options  for  IT  End-Users* 

;  Pre-Registration 

I  (through  April  11th) 

On-Site  Registration 

j  (after  April  11th) 

General  Conference  Package  (Apr.  15, 16): 

(Includes  Expo.  Meals  and  Receptions) 

□  $1,095 

□  $1,245 

Total  4-day  Package  (Apr.  14, 15, 16, 17):  □  $1,490  □  $1,690 

(Includes  General  Conference  Package;  Technical  and  Business  Tracks;  SNIA-produced  Tutorials:  SNIA-Certification  “Test-Ready"  Courses:  Expo,  Meals  and  Receptions) 

Options  for  IT  Vendors** 

Total  4-day  Package  (Apr.  14, 15, 16, 17):  □  $1,490 

(Available  to  Sponsoring  Vendors  and  their  Resellers/Integrators:  Industry  Consultants:  and  Storage  Solutions  Implementors) 

□  $1,690 

Non-Sponsoring/Exhibiting  Vendor  Package: 

□  $5,000 

□  $5,000 

*  iT  End-Users  are  defined  as  those  who  are  attending  Storage  Networking  World  with  an  intent  (and  an  IT  spending  budget)  to  potentially  buy/purchase  hardware/software/services/etc.  from  our  conference 
sponsors  and  exhibitors.  As  such,  account  representatives/business  development  from  any  company,  analysts,  venture  capitalists,  and  anyone  else  attending  who  does  not  have  IT  purchasing  influence  within 
their  organization  are  excluded  from  the  “IT  End-User"  designation.  Enforcement  of  this  interpretation  and  policy  is  at  the  sole  discretion  of  Computerworld.  Questions?  Please  call  1-800-883-9090. 


**  Vendors  are  encouraged  to  participate  at  Storage  Networking  World  through  sponsorship.  (Details  are  available  by  calling  Ann  Harris  at  1-508-820-8687.)  Alternatively,  vendors  (as  well  as  venture  capitalists, 
equity  analysts,  and  other  “non-IT  end-user"  professionals  as  defined  by  Computerworld),  may  apply  for  registration  at  the  “non-sponsoring  vendor"  rate.  Determination  of  what  constitutes  a  “non-sponsoring  vendor" 
registration  is  at  the  sole  discretion  of  Computerworld.  You  will  also  be  required  to  adhere  to  our  non-solicitation  policy  posted  on-site. 


Registration  Information:  (This  section  must  be  completed  in  order  to  process  your  application) 


First  Name: 


Middle  Initial: 


Last  Name: 


Title: 

Company: 

Street  Address: 

Suite,  Apt.,  etc.: 

City: 

State/Prov: 

Zip/Postal  Code: 

Country: 

Phone  Number: 

Extension: 

Fax  Number: _ E-Mail  Address: _ 

Badge  Name: _  □  Special  Services  Required?  (Please  attach  written  description) 

Would  you  like  to  receive  information  about  playing  in  the  golf  outing  on  Monday,  April  14th  (PM)?  □  Yes  □  No 
Please  indicate  your  preferred  conference  shirt  size:  — )  S  □  M  □  L  □  XL  □  XXL  □  XXXL 


Attendee  Profile:  (This  section  must  be  completed  in  order  to  process  your  application) 

SECTION  A  -  FOR  IT  END-USERS  ONLY 


Your  Business/Industry: 

□  Transportation/Utilities 

□  Mining/Oil/Gas 

□  Media/Publishing 

□  Banking/Finance/Insurance 

□  Telecommunications 

□  Wholesale/Retail  (Non-IT) 

□  Advertising/Marketing/Public 
Relations 

□  Education 

□  Government/Military 

□  Healthcare 

□  Manufacturing  (Non-IT) 

□  Other 

Your  Job  Title/Function: 

□  CEO/COO/Chairman/President 

□  CIO/CTO 

□  VP/GM/Director 

□  IS/IT  Director/Manager 

□  Other  IS/IT  Department 
Manager/Supervisor 

□  Other  Corporate/Business  Manager 

□  Corporate/Business  Staff 

□  Consultant  (Internal)  or  Other 

Select  item  below  that 
most  closely  matches  your 
involvement  in  IT  decisions: 

□  Specify  features/Technical 
requirements 

□  Evaluate/Recommend  Products, 
Brands,  Vendors 

□  Create  Strategy/Determine  the  need 
to  purchase 


□  Set  budget  for  expenditure 

□  Authorize/Approve  purchase 

□  None  of  the  above 

Employees  in  your  entire 
Company: 

□  10,000+ 

□  5,000-9,999 

□  1,000-4,999 

□  500-999 

□  100-499 

□  Less  than  100 

Estimated  annual  revenue 
of  your  entire  company: 

□  $10  Billion+ 

□  $5  Billion  -  $9.9  Billion 

□  $1  Billion  -  $4.9  Billion 

□  $500  Million  -  $999  Million 

□  $100  Million  -  $499  Million 

□  $50  Million  -  $99  Million 

□  Less  than  $50  Million 

Annual  company  IT  budget 
(All  IT  products  and  services): 

□  $100  Million* 

□  $50  Million  -  $99.9  Million 

□  $20  Million  -  $49.9  Million 

□  $10  Million  -  $19.9  Million 

□  $5  Million  -  $9.9  Million 

□  $1  Million  -  $4.9  Million 

□  $500,000  -  $999,999 

□  Less  than  $500,000 


Annual  company  IT  budget 
(Storage  products  and  services): 

□  $100  Million* 

□  $50  Million  -  $99.9  Million 

□  $20  Million  -  $49.9  Million 

□  $10  Million  -  $19.9  Million 

□  $5  Million  -  $9.9  Million 

□  $1  Million  -  $4.9  Million 

□  $500,000  -  $999,999 

□  Less  than  $500,000 

Your  personal  IT  spending 
authority  (All  IT  products 
and  services): 

□  $100  Million* 

□  $50  Million  -  $99.9  Miliion 

□  $20  Million  -  $49.9  Million 

□  $10  Million  -  $19.9  Million 

□  $5  Million  -  $9.9  Million 

□  $1  Million  -  $4.9  Million 

□  $500,000  -  $999,999 

□  Less  than  $500,000 

Your  personal  IT  spending 

authority  (Storage  products 
and  services): 

□  $100  Million* 

□  $50  Million  -  $99.9  Million 

□  $20  Million  -  $49.9  Million 

□  $10  Million  -  $19.9  Million 

□  $5  Million  -  $9.9  Million 

□  $1  Million  -  $4.9  Million 

□  $500,000  -  $999,999 

□  Less  than  $500,000 


SECTION  B  -  FOR  IT  VENDORS  ONLY 


Your  Business/Industry: 

□  VAR/VAD/ASP/System  Integrator 

□  Industry  Consultant/Storage  Solution  Integrator 

□  Manufacturing  (IT) 

□  Computer  Retailer/Dealer/Wholesaler 

□  Software  Development  (Storage) 

□  Other  Computer  Related  (Non-Storage) 


Your  Job  Title/Function: 

□  CEO/COO/Chairman/President 

□  CFO/Controller/Treasurer 

□  VP/GM/Director 

□  Sales/Marketing/Product  Staff 

□  CIO/CTO/Other  IS/IT  Manager 

□  Engineering  Staff 

□  Press 


Payment  Method 

□  Check  Enclosed  (checks  must  be  received  by  4/4/03) 
(Make  payable  to:  Computerworld;  Mail  to:  Computerworld,  Attn:  Pam 
Malingowski,  500  Old  Connecticut  Path,  Framingham,  MA  01701) 

□  American  Express  □  VISA  □  MasterCard 
Account  Number: 


Expiration  Date: _ 

Card  Holder  Name: 


Signature  of  Card  Holder: 


Cancellation  Policy  (All  of  the  below  options  require  written  notification..) 

In  the  event  of  cancellation,  the  registrant  has  three  options: 

1)  He  or  she  may  substitute  another  attendee  for  this  conference. 

2)  He  or  she  may  transfer  this  registration  to  the  Fall  2003  Storage  Networking  World* 
conference,  if  written  notice  is  received  by  March  31,  2003. 

3)  The  registration  fee  will  be  refunded,  less  $250  service  charge,  if  written  notice  is 
received  by  March  31,  2003. 

Computerworld  reserves  the  right  to  limit  and/or  refuse 
any  registration  for  any  reason. 


Schedule  of  Conference  Events  (subject, oc^e) 

Monday,  April  14,  2003 

•  Pre-Conference  Golf  Outing 
e  Pre-Conference  Networking  Reception 

•  Tutorial  Sessions 

Tuesday,  April  15,  2003 

®  General  Conference 
•  Interoperability  and  Solutions  Demo 

•  Exposition 

Wednesday,  April  16,  2003 

•  General  Conference 

•  Interoperability  and  Solutions  Demo 

*  Exposition 

•  Gala  Evening 

Thursday,  April  17, 2003 

*  Tutorial  Sessions 

www.computerworld.com 
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Movex  Gets  XML 

Intentia  International  AB,  a  cus¬ 
tomer  relationship  management 
and  enterprise  resource  planning 
application  vendor  in  Sweden,  is 
adding  XML  Web  services  tech¬ 
nology  to  its  Movex  flagship  suite. 
The  Movex  Web  Services  Frame¬ 
work  will  include  a  tool  kit  and 
runtime  server.  The  product  will 
ship  in  April. 

Expand  Networks 
Boosts  Accelerator 

Expand  Networks  Inc.  in  Rose- 
land,  N.J.,  has  added  a  new 
feature  to  its  Accelerator  traffic- 
compression  appliance  that  im¬ 
proves  the  performance  of  voice 
over  IP  on  low-bandwidth  data 
links  up  to  128K  bit/sec.  Expand 
offers  a  free  upgrade  to  current 
customers  with  service  contracts. 


NetlQ  Updates  SQL 
Management  Suite 

NetlQ  Corp.  has  released  Version 
2.0  of  its  year-old  SQL  Manage¬ 
ment  Suite,  with  new  features  in¬ 
cluding  a  revamped  user  interface 
in  one  module  and  additional  re¬ 
porting  tools  in  another.  The  San 
Jose  vendor’s  offering  is  intended 
to  ease  administration  of  Micro¬ 
soft  Corp.  SQL  Server  production 
systems  by  providing  configura¬ 
tion  management,  diagnostic  and 
recovery  functions.  Pricing  for 
the  full  suite  starts  at  $15,000  for 
a  five-server  starter  pack. 


ERoom  Offering 
Gets  Addition 

Enterprise  content  management 
software  vendor  Documentum 
Inc.  announced  its  first  integrated 
product  offering  resulting  from  its 
acquisition  of  collaboration  tech¬ 
nology  provider  eRoom  Technolo¬ 
gy  Inc.  last  year.  ERoom  Enter¬ 
prise  lets  corporate  workers  col- 
laboratively  create,  share,  man¬ 
age,  reuse  and  archive  content, 
according  to  officials  at  the 
Pleasanton,  Calif.,  firm.  Upgrade 
pricing  starts  at  $25  per  seat. 
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Don’t-Ask-Don’tTcll 

E-Commerce 


WHEN  IT  COMES  to  IT  security,  good 

technology  can’t  protect  an  organi¬ 
zation  against  bad  policy.  Judging 
from  the  way  the  banking  industry 
handled  the  recent  theft  of  more 


than  8  million  credit  card 
account  numbers  [Quick- 
Link  36530],  that’s  a  lesson 
that  major  U.S.  credit  card 
associations  and  issuers 
have  yet  to  learn. 

The  situation  is  unlikely 
to  improve  in  the  near  term 
because  the  financial  ser¬ 
vices  firms  that  control 
most  credit  cards  see  little 
economic  incentive  to 
change  their  ways.  Those 
most  at  risk  of  incurring 
losses  include  consumers 
(through  identity  theft),  and  mer¬ 
chants  that  accept  “card-not-present” 
transactions. 

The  card  associations’  policies,  as 
demonstrated,  could  be  described 
thusly:  Don’t  publicize  credit  card 
thefts  in  any  way;  don’t  require  card 
issuers  to  notify  affected  card  owners 
unless  they  ask;  don’t  share  the  list  of 
compromised  account  numbers  with 
merchants;  and  don’t  require  banks  to 
reissue  stolen  cards.  And  don’t  worry 
—  banks  will  monitor  accounts  for 
“unusual  activity”  with  automated, 
high-tech  monitoring  tools. 

Card-not-present  transactions  aren’t 
protected  by  the  same  zero-liability 
policy  given  to  consumers  and  mer¬ 
chants  at  brick-and-mortar  stores, 
where  clerks  can  physically  check  the 
credit  card  and  obtain  a  signature. 

This  puts  online  vendors  at  a  competi¬ 
tive  disadvantage. 

Meanwhile,  credit  card  fraud  is  in¬ 
creasing.  In  early  February,  the  largest 
electronic  break-in  to  date  took  place 
at  credit  card  processor  Data  Proces¬ 
sors  International  (DPI)  in  Omaha. 


Some  8  million  Visa, 
MasterCard  and  other 
accounts  were  affected. 

Yet  customers  wouldn’t 
have  known  about  the 
breach  until  their  state¬ 
ments  started  arriving  if  it 
hadn’t  been  for  Citizens 
Bank,  which  decided  to  re¬ 
call  8,800  affected  cards. 

If  accounts  are  used 
fradulently,  how  much 
damage  will  online  mer¬ 
chants  suffer  before  the 
monitoring  systems  catch 
on  and  defuse  the  situation?  Probably 
nothing  will  happen.  But  merchants 
won’t  know  for  sure  until  cardholders 
receive  their  statements. 

What’s  worse,  this  cloak  of  secrecy 
could  ultimately  erode  cardholder 
confidence  and  trust.  For  example,  the 
story  of  the  DPI  incident  surfaced  in 
the  press  on  Feb.  17.  DPI  acknowledged 
the  incident  on  the  20th.  A  spokes¬ 
person  declined  to  say  when  the 
break-in  occurred,  but  unofficial  re¬ 
ports  put  it  early  in  the  month  —  per¬ 
haps  as  early  as  Feb.  3  or  4.  Visa  said  it 
“immediately  notified  all  affected 
card-issuing  financial  institutions.”  Yet 
one  bank  manager  I  spoke  with  said 
she  couldn’t  confirm  whether  specific 
cards  were  on  the  list  until  Feb.  19.  Her 
bank  didn’t  start  receiving  the  com¬ 
promised  account  numbers  until  Feb. 
17  and  received  the  last  batch  two  days 
later.  Was  this  case  the  exception? 

To  their  credit,  some  card  issuers 
are  moving  to  protect  online  transac¬ 
tions  with  new  authentication  pro¬ 
grams.  For  example,  MasterCard 
SecureCode  and  Verified  by  Visa  re¬ 


quire  the  buyer  to  use  a  password  be¬ 
fore  making  a  purchase.  Merchants 
who  obtain  passwords  from  buyers  are 
protected  from  chargebacks.  But  most 
buyers  don’t  have  one  yet.  MasterCard 
and  others  should  follow  Visa’s  lead 
and  protect  e-commerce  providers 
that  request  passwords  from  buyers. 

This  shifts  the  cost  of  stolen  data 
away  from  merchants  but  doesn’t 
solve  the  problem.  Credit  card  compa¬ 
nies  should  also  question  whether 
having  dozens  of  processing  compa¬ 
nies  handling  customer  data  makes 
sense  in  a  Web-connected  world.  Or 
whether  security  measures  that  ad¬ 
dress  the  way  card  transaction  proces¬ 
sors,  issuers  and  merchants  handle 
and  protect  account  data  should  be 
more  strictly  dictated  and  policed.  Or 
whether  it  makes  better  business 
sense  to  assume  a  policy  of  more  open 
disclosure  with  cardholders. 

In  a  world  where  credit  card  num¬ 
bers  can  be  used  for  fraud  or  identity 
theft,  organizations  have  a  moral 
obligation  to  disclose  such  compro¬ 
mises  to  cardholders  and  merchants 
as  soon  as  a  security  hole  is  closed. 

The  industry  worries  about  the 
expense  of  reissuing  cards.  Yet  banks 
have  spent  a  lifetime  building  trust, 
and  serious  erosion  of  consumer 
confidence  could  cost  far  more  than 
simply  replacing  those  cards.  It  could 
cost  billions  in  lost  sales  to  e-com¬ 
merce  merchants  that  are  dependent 
on  credit  card  payment  systems. 

The  current  policies  are  bad  for 
e-commerce,  bad  for  consumers  and, 
ultimately,  bad  for  business.  The  in¬ 
dustry  should  make  changes  now, 
before  consumers  finally  wake  up  to 
what’s  going  on  and  legislators  step 
into  the  breach.  I 


GET  THE  FACTS 

Read  vendor  statements,  proposed  legislation  and  related 
research  and  discussion  on  the  issues  on  our  Web  site: 
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Prepare  for  the  New  Computing  Landscap 


March  20,  2003 
Boston,  Massachusetts 


March  26,  2003 
San  Jose,  California 


In  a  time  of  economic  uncertainty,  a  sense  of  caution  has  surfaced  in  the  IT  and 
telecom  industries.  IT  buyers  are  spending  less,  hardware  is  becoming  more 
commoditized,  software  is  in  a  complexity  crisis,  and  services  contracts  are 
decreasing  in  size.  At  the  same  time,  the  industry  is  seeing  some  positive  signs, 
including  more  demand  to  support  mobility  and  an  increase  in  broadband 
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SPECIAL  OFFER! 

Register  by  February  25  and 
receive  a  $200  discount  off 
the  conference  fee. 


Register  Online  Now 
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A  Setup  for  a 
Security  Nightmare 

Author  Notra  Trulock  details  the  appalling 
state  of  computer  security  at  the  Department 
of  Energy  during  one  of  the  most  infamous 
espionage  scandals  in  recent  decades,  and  what 
the  corporate  world  can  learn  from  it.  Page  40 


ROI:  Whose  Job 
Is  It,  Anyway? 

Columnist  John  Berry  asks,  “Why 
can’t  IT  evolve  into  a  value-added 
business  partner  that  could  help 
business  units  with  economic 
value  management  tasks?”  Page  41 


S  QUOTE  OF  THE  WEEK 

I  #  The  difference  between 

HI  portals  which  succeed  and 
those  that  don’t  is  clearly  the 
amount  of  business  involvement.” 

-  Bob  Rugare,  portal  consultant, 

Cap  Gemini  Ernst  &  Young 


Here  are  10  ways  to  assess  the 
financial  health  of  your  IT  vendors. 
By  Kathleen  Melymuka 


CHOOSING  A  STRATEGIC  VENDOR  is  a 
long-term  commitment  that  involves  a 
lot  more  than  technology.  Before  you 
tie  your  company’s  fortunes  to  those  of 
a  supplier,  you’d  better  dig  deep  into 
your  would-be  partner’s  financial 
health.  Here  are  10  questions  that  ven¬ 
dor-management  veterans  say  can  help 
you  decide  whether  your  intended  is 
really  the  one  for  you. 


1  What’s  new  about  the  company?  Even 
if  you  think  you  know  all  about  a 
technology  vendor,  check  again. 
Today’s  Wall  Street  darling  could 
be  tomorrow’s  Enron.  Tap  a  variety  of 
sources  for  your  intelligence,  from 
Dun  &  Bradstreet  Inc.  (D&B)  to  your 
industry  peers.  “You  may  find  that  this 
new  company  that  seems  really  hot 
used  to  be  this  old  company  that  was 
really  outdated,”  says  Pamela  Holling- 
ton,  a  director  at  Rebound  Consulting 
Ltd.  in  North  Vancouver,  British  Co¬ 
lumbia.  Beware  of  companies  that 
change  their  names  to  distance  them¬ 
selves  from  poor  financial  performance. 
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2  How  does  it  conduct  business  and 
with  whom?  Some  IT  vendors 
have  reputations  as  being  un¬ 
ethical;  others  are  just  difficult 
to  do  business  with.  Either  way,  it  pays 
to  find  out.  “I  can’t  believe  how  many 
clients  actually  don’t  check  references,” 
says  Eileen  M.  Birge,  an  analyst  special¬ 
izing  in  vendor  relationships  at  The 
Concours  Group  in  Kingwood,  Texas. 
“It  sounds  so  basic,  but  they  say,  We 
were  in  a  hurry,’  or,  ‘It  was  really  close  to 
the  end  of  the  quarter,  and  they  offered 
a  great  deal  if  we  signed  right  then.’  ” 
Go  beyond  references.  Check  the 
vendor’s  ethics  with  various  sources, 
including  customers,  says  Pat  Fausett, 
a  strategic  alliances  manager  for  soft¬ 
ware  and  intellectual  property  at  Agi¬ 
lent  Technologies  Inc.  in  Santa  Clara, 
Calif.  Many  vendors  list  customers  on 
their  Web  sites,  and  you  can  also  ask 
among  your  peers.  Then  call  the  cus¬ 
tomers’  accounting  departments  and 
ask  what  it’s  like  to  work  with  that  ven¬ 
dor.  Is  billing  timely  and  accurate?  Are 
hidden  “gotchas”  in  contracts  costing 
extra?  Is  the  vendor  flexible  about  li¬ 
cense  transfers  in  the  case  of  a  spin¬ 
off?  Does  it  work  with  the  customer  on 
creative  ways  to  meet  peak  demands? 

3  How  has  the  vendor’s  executive 
team  performed?  Look  at  the 
backgrounds  of  the  officers, 
especially  the  chief  financial 
officer,  says  Fausett.  “See  where 
they’ve  been,  what  they’ve  done  or 
haven’t  done,”  she  says.  For  example, 
does  the  CFO  have  a  track  record  in 
other  successful  companies,  or  is  he 
learning  on  the  job?  Did  he  leave  a  for¬ 
mer  company  under  unusual  circum¬ 
stances?  Has  his  name  been  linked  to 
bankruptcies  or  Securities  and  Ex¬ 
change  Commission  investigations? 

If  his  last  company  is  unknown  to 
you,  run  the  company  name  through  a 
search  engine  and  see  what  comes  up. 
If  an  officer  has  jumped  from  company 
to  company,  that’s  also  a  red  flag. 

“Look  at  where  they  were  jumping 
from  and  to,”  Fausett  says.  “Think 
about  what  caused  that.” 
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4  What  is  the  vendor’s  market  posi¬ 
tion?  If  you’re  taking  a  risk  on 
a  new  technology,  be  sure 
you’ve  got  a  market  leader, 
says  Birge.  “Unless  they’re  a  leader, 
you  don’t  want  to  be  out  there  on  the 
edge  with  them.”  To  get  a  quick  read 
on  the  vendor’s  market  position,  check 
Web  sites  such  as  Hoovers.com  and 
The  Motley  Fool  (www.fool.com).  But 
beware  of  a  market  leader  with  no  fol¬ 
lowers,  says  Greg  Schueman,  vice  pres¬ 
ident  and  chief  technology  officer  at 
Mercury  Insurance  Group  in  Brea, 

Calif.  That  can  indicate  an  insufficient 
market  for  the  product.  “You  want  to 
see  several  strong  competitors,”  he 
says.  “You  have  to  look  at  the  viability 
of  that  particular  market  segment,  not 
just  the  company.” 

5  What  is  the  vendor’s  financial  posi¬ 
tion?  For  public  companies,  use 
resources  such  as  the  vendor’s 
Web  site  (see  box)  and  D&B  to 
check  financials  and  earnings  state¬ 
ments.  “Go  to  Hoover’s  and  pull  some 
data  there,”  says  Schueman.  “You  can 
just  pay  for  what  you  need.  Look  at 
what’s  happening  with  their  business 
model.  What  kind  of  customers  are 
coming  on  board?  Who  are  their  com¬ 
petitors?  Look  for  a  company  that  is 
profitable  and  becoming  increasingly 
so.  You  don’t  want  to  see  that  they’re 
gaining  market  share  by  burning  cash.” 

A  10-K  report,  which  publicly  traded 
companies  must  prepare  annually  for 
the  SEC,  is  a  “gold  mine,”  Fausett  says. 
It  includes  information  such  as  finan¬ 
cial  statements  and  supplementary 
data;  analysis  of  the  company’s  finan¬ 
cial  condition;  quantitative  and  quali¬ 
tative  disclosures  about  market  risk; 
information  on  legal  proceedings,  di¬ 
rectors  and  officers;  and  additional  re¬ 
sources.  In  many  cases,  the  10-K  is 
available  on  the  vendor’s  Web  site. 

For  a  privately  held  vendor,  ask  the 
owner  for  permission  to  talk  with  the 
bank  that  represents  the  company.  The 
bank  probably  won’t  give  you  num¬ 
bers,  Fausett  says,  but  it  will  give  an  in¬ 
dication  of  the  vendor’s  debt  ratio  and 
the  outlook  for  its  financial  health. 

What  is  the  vendor’s  ability  to  as¬ 
sume  financial  risk?  A  vendor 
can  promise  you  anything,  but 
can  it  deliver?  If  it  goes  belly 
up,  it  may  not  have  the  financial  re¬ 
sources  to  refund  your  losses,  regard¬ 
less  of  good  intentions  and  contract  as¬ 
surances.  “You  have  to  be  sure  in  the 
event  they  fail  that  they  can  keep  you 
whole,”  Birge  says.  One  company  she 
worked  with  was  dealing  with  a  start¬ 


up  application  service  provider.  The 
customer  required  the  vendor  to  sup¬ 
ply  financial  statements  every  month, 
including  certification  that  it  had  six 
months’  worth  of  working  capital  on 
hand.  The  contract  stipulated  that  if 
the  capital  ever  dipped  below  six 
months’  worth,  the  customer  had  the 
right  to  pull  out  of  the  agreement  and 
bring  the  applications  back  in-house 
over  several  months. 

Does  the  vendor  have  pending  or 
past  lawsuits?  “Most  salespeople 
won’t  say,  ‘By  the  way,  we’re  be¬ 
ing  sued,’  ”  Fausett  notes,  but 
financial  statements  will  include  a  sec¬ 
tion  on  litigation  judgments  against  the 
company.  Check  its  Form  10-K  and  ask 
your  legal  department  to  do  a  search 
for  past  litigation  against  the  vendor. 
“Learn  who  has  been  suing  the  compa¬ 
ny  and  why,”  Fausett  says.  Also  check 
whether  it  has  settled  out  of  court  or 
gone  to  trial.  “That  gives  me  a  flavor  for 
how  they  deal  with  adversity,”  she  says. 

81s  there  an  acquisition  on  the  hori¬ 
zon?  You  sign  a  contact  with  a 
vendor  you  really  want  to 
work  with,  and  two  weeks  lat¬ 
er,  the  vendor  is  acquired.  “There  is  so 
much  consolidation  in  the  industry 
that  this  comes  up  often,”  says  Holling- 
ton.  The  product  you’re  about  to  buy 
may  be  important  to  the  vendor,  but 
the  company  buying  the  vendor  may 
not  be  interested  in  supporting  it. 

Schueman  learned  this  the  hard  way 
once  when  a  software  vendor  he  was 
dealing  with  went  bankrupt.  The  com¬ 
pany’s  assets  were  acquired  by  another 
company,  and  the  new  owner  de- 
emphasized  the  product.  “The  lesson 
for  me  was  that  you  have  to  look  ex¬ 
tremely  carefully  at  the  likelihood  that 
a  product  will  get  the  investment  it 
needs  to  push  forward,”  he  says. 

If  the  company  is  public,  you  should 
be  able  to  sniff  out  an  impending  ac¬ 
quisition.  Also,  ask  specifically  in  the 
request  for  proposals  about  future  or¬ 
ganizational  plans  and  the  long-term 
strategy  for  the  product. 

Once  you  have  gathered  your  intelli¬ 
gence,  make  sure  your  investigations  are 
ongoing.  “For  a  strategic  supplier,  looking 
at  those  things  is  not  a  one-time  event,” 
says  Larry  Graham,  vice  president  of 
IT  vendor  management  at  San  Mateo, 
Calif. -based  Inovant,  a  wholly  owned 
transaction-processing  subsidiary  of 
Visa  International  Inc. 

John  Moon,  CIO  at  Baxter  Interna¬ 
tional  Inc.  in  Deerfield,  Ill.,  agrees.  A 
while  ago,  his  company  was  doing 
business  with  an  Internet  service 


provider  that  was  experiencing  finan¬ 
cial  difficulties.  The  vendor  repeatedly 
assured  Moon  that  it  was  able  to  meet 
its  commitments  and  was  in  serious 
discussions  with  a  number  of  compa¬ 
nies  about  a  potential  acquisition. 

Then  one  day,  it  laid  off  virtually  its 
entire  workforce  without  warning. 
Moon  got  the  news  from  laid-off  em¬ 
ployees.  “We  trusted  those  folks  be¬ 
cause  they  had  been  straight  with  us,” 
he  says.  “We  didn’t  verify  as  much  as 
we  should  have.” 

Now  Moon  monitors  his  top  30  IT 
vendors  as  he  would  the  competition 
or  a  potential  acquisition  to  see  how 
well  they’re  executing  against  their 
business  plans.  He  watches  their  finan¬ 
cial  performance  on  a  quarterly  basis 
and  looks  at  their  balance  sheets  to  see 
whether  they  are  consuming  cash  and 
will  need  to  borrow  money  and  how 
that  will  affect  products  and  services. 
“Now  we  use  the  old  Ronald  Reagan 
approach,”  he  says.  “Trust  but  verify.” 

Continual  questioning  will  help  you 
to  detect  impending  changes  that  may 
affect  your  business  and  to  anticipate 
problems  early  so  you  can  manage  them. 

9  Who  is  your  real  partner?  If  your 
intended  partner  is  really  the 
local  value-added  reseller 
(VAR)  of  the  big  vendor’s 
products  rather  than  the  big  vendor 
itself,  that’s  who  you  need  to  know 
about.  “Finding  out  [that]  Great  Plains  is 
a  stable  Microsoft  company  is  interest¬ 
ing,”  Hollington  says.  “But  it’s  more  in¬ 
teresting  to  know  the  VAR  [I  deal 
with]  in  Vancouver  is  about  to  be  sold 
to  someone  else.” 

Is  the  vendor  committed  to  the 
technology?  Are  you  buy¬ 
ing  at  the  end  of  a  product 
cycle?  Is  the  vendor  more 
interested  in  developing  the  next  big 
thing  than  supporting  what  you’re  buy¬ 
ing?  “Look  at  the  expected  life  of  the 
technology  offered  and  the  vendor’s 
commitment  to  that  technology,”  Birge 
advises.  What  are  the  vendor’s  research 
and  development  expenditures  in  the 
area  you’re  interested  in?  she  asks. 

How  innovative  has  it  been  in  your  in¬ 
dustry  or  field?  You  can  get  R&D  num¬ 
bers  from  the  vendor’s  10-K,  but  don’t 
neglect  your  own  internal  intelligence. 
If  you’ve  worked  with  the  vendor  be¬ 
fore,  has  it  brought  innovative  ideas 
and  interesting  thinking  that  made  you 
sit  up  and  take  notice?  ► 


Melymuka  is  a  Computerworld 
contributing  writer.  Contact  her  at 
kmelymuka@earthlink.net. 


It  Doesn’t  Take 


Sherlock  Holmejf 

Much  of  the  intelligence  you  need  about  a 
prospective  vendor  partner  may  be  just 
a  click  away.  To  see  how  much  informa¬ 
tion  we  could  get  on  a  prospective  vendor 
just  from  its  own  Web  site,  we  picked 
Symantec  Corp.  in  Cupertino,  Calif., 
at  random.  This  is  what  we  found; 


CORPORATE  INFORMATION  PAGE 


■  Company  profile _ 

■  Four  years  of  revenues _ 

■  Basics  on  technology  and 

services  offered _ _ 

■  Customer  list _ 

■  Corporate  history  highlights _ 

■  Directors  and  top  executives 

■  Worldwide  facilities  and 

service  centers _ 

■  Ability  to  drill  down  to: 
m  Latest  news 

m  Information  on  partnerships, 
acquisitions  and  alliances 

f§  Investor  relations 
k  Executive  biographies 


INVESTOR  RELATIONS  PAGE 


■  2003  quarterly  financial  results 

■  Toll-free  fax  number  for  free 

copies  of  SEC  filings  and  $p|§f 
financial  documents _ 

■  Ability  to  drill  down  to: 

m  Additional  financial  information 
m  Investor  resources 
m  Details  on  corporate  direction 


FINANCIAL  INFORMATION  PAGE 


■  Financial  news  releases 

■  Details  about  recent  alliances 

■  Annual  reports  since  1SS6 

(including  10-Ks) _ 

■  Other  SEC  filings 


INVESTOR  RESOURCES  PAGE 


■  Summary  of  recent  quarterly 

financial  results _ 

■  Presentation  for  investors 

■  List  of  research  analysts  who 

report  on  Symantec 
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Operates  easily  with  Windowsf  Linux®  and  OS/400? 
Copper-based.  Simple  and  powerful. 

Easy  to  use,  with  self-healing,  self-managing  capabilities. 
For  more  on  iSeries  and  the  on  demand  era, 
visit  ibm.com/eserver/genie 
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How  to  build  and 
maintain  portals 
that  users  will 
really  use.  By 
Connie  Winkler 


ompanies  typically  plan 
and  deploy  software  por¬ 
tals  to  provide  employ¬ 
ees,  customers  and  sup¬ 
pliers  with  a  single,  Web- 
based  access  point  for  data,  content 
and  both  new  and  legacy  applications 
across  the  enterprise. 

But  things  don’t  always  go  as 
planned.  Too  often,  companies  build 
portals,  but  users  just  don’t  come. 

“So  many  firms  with  less-than- 
hoped-for  portal  results  repeat  that 
story  that  it  has  almost  become  a 
cliche  in  the  industry,”  says  Nathaniel 
Palmer,  an  analyst  at  The  Delphi 


Group  in  Boston.  In  a  December  Del¬ 
phi  survey  of  500  companies  spanning 
20  industries,  37%  of  the  companies 
that  had  installed  portals  said  they 
were  disappointed  by  the  lack  of  “ade¬ 
quate  interest  among  target  users.” 

According  to  Delphi’s  findings,  the 
reason  people  aren’t  using  portals  is 
because  there  isn’t  a  strategy  or  life 
cycle  for  keeping  people  involved  — 
what  Delphi  calls  change  management, 
explains  Palmer.  “There’s  a  lack  of 
strategy  beyond  the  technical  architec¬ 
ture,”  he  says. 

Indeed,  too  many  companies  got 
caught  up  in  the  techie  hoopla  sur- 
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rounding  portal  technology,  focusing 
mostly  on  implementation  and  inte¬ 
gration  issues,  according  to  Delphi’s 
analysis  of  its  survey  findings.  Mean¬ 
while,  critical  usability  issues,  such  as 
educating  users  about  the  portal’s  ca¬ 
pabilities,  training  them  to  use  it  effi¬ 
ciently  and  marketing  the  value  of  us¬ 
ing  the  portal,  haven’t  received  the 
necessary  attention. 

“It  seems  obvious,  but  time  after 
time,  I  have  seen  the  enterprise  value 
proposition  for  a  portal  be  that  it’s  go¬ 
ing  to  save  everyone  in  the  company 
20  minutes  a  day,”  says  Bill  Ives,  a 
partner  at  Accenture  Ltd.  in  Boston. 
“That’s  a  little  fuzzy,”  he  says.  “What 
are  they  supposed  to  do  with  that 
20  minutes?” 


Start  at  the  Top 


Another  problem  many  companies 
have  is  failing  to  involve  top  manage¬ 
ment  from  the  very  beginning  of  a  por¬ 
tal  project.  It’s  critical  to  pay  attention 
to  the  requirements  of  top  managers 
because  they  are  often  the  busiest  of 
potential  users,  and  they’re  frequently 
on  the  road  or  located  remotely,  mak¬ 
ing  them  among  the  hardest  to  bring 
to  the  portal. 

“Bringing  the  portal  to  them  through 
off-line  access  and  proactive  notifica¬ 
tion  is  one  of  the  best  opportunities 
for  successful  portals,”  notes  Palmer. 

Experts  estimate  that  project  portal 
teams  need  to  devote  30%  to  40%  of 
their  time  gathering  business  require¬ 
ments  and  getting  top  managers  in- 

Dvolved  from  the  start.  “The 

.  difference  between  portals 
^  which  succeed  and  those 
|h  that  don’t  is  clearly  the 
amount  of  business 
liH  involvement  the  portal 
1H  project  receives  and 
j»  the  level  of  integration 
W  with  the  business,”  says 
^  Bob  Rugare,  a  portal  con¬ 
sultant  at  Cap  Gemini  Ernst 


&  Young  in  Atlanta. 

Portal  project  teams  should  be  al¬ 
ways  looking  to  add  value  to  the  busi¬ 
ness,  Rugare  says.  That  often  begins 
with  addressing  a  very  specific  busi¬ 
ness  problem. 

At  Du  Pont  Co.’s  $3.8  billion  Perfor¬ 
mance  Coatings  group,  the  issue  was 
content  management. 

“We  have  a  very  large  number  of 
documents  for  marketing:  brochures, 
press  releases,  warranty  information 
on  products  and  general  support 
content  for  our  distributors  and  tear 
repair]  body  shops,”  explains  Cather¬ 
ine  Marchand,  the  group’s  e-business 
strategy  manager.  “Our  salesmen  were 


Southwire  was  trying  to  be 
ahead  of  the  game  -  at  the 
urging  of  our  CEO.  With  all  this 
Internet  hoopla,  the  thinking 
was  that  surely  there  was  some¬ 
thing  we  could  do  with  it. 

SHEILA  SIMPSON,  WEB  DEVELOPMENT  MANAGER,  SOUTHWIRE 


driving  around  with  50  pounds  of  ob¬ 
solete  literature  in  their  trunk.” 

Du  Pont  opted  to  deliver  the  infor¬ 
mation  through  a  Web-based  portal, 
using  technology  from  Bowstreet,  a 
portal  software  and  Web  development 
tools  company  in  Tewksbury,  Mass. 

Du  Pont  wanted  the  ability  to  cus¬ 
tomize  information  about  its  half- 
dozen  coating  brands.  It  also  wanted 
each  of  its  2,500  distributors  and  repair 
shops  worldwide  to  see  the  relevant 
customized  brand  information  dis¬ 
played  in  almost  4,000  different  site 
views,  which  the  technology  would 
allow  it  to  do. 

Beyond  Custom  Content 

Few  disagree  with  the  content  manage¬ 
ment  value  of  portals.  “The  two  go 
hand  in  hand,”  says  Ives,  who  tells  of 
call  center  staffers  all  working  off  the 
same  page  when  wireless  call  plan  in¬ 
formation  is  consolidated  in  a  portal. 

“Commonality  of  content  both  in¬ 
creases  business  efficiency,  because 
it’s  cheaper  to  do  it  once,  and  increases 
the  effectiveness  of  the  information, 
because  it’s  consistent  across  multiple 
channels.” 

Since  the  content  capability  was  ini¬ 
tiated,  Du  Pont’s  site  has  grown  rapid¬ 
ly.  The  body  shops  can  now  get  train¬ 
ing,  benchmarking  tools  and  car  paint 


color  formulas  via  the  portal.  There’s 
also  a  job-posting  and  resume  service, 
Marchand  says.  And  for  the  distribu¬ 
tors,  Du  Pont  is  researching  adding 
order-tracking  and  order-accuracy 
capabilities. 

Portal  project  teams  must  think  long 
term,  advises  Ben  Gaucherin,  chief 
technology  officer  at  Sapient  Corp., 
a  technology  consulting  company  in 
Cambridge,  Mass. 

“Have  a  clear  vision  and  commit¬ 
ment  to  the  long-term  picture _ Ask 

what  [the  portal]  is  going  to  do  for 
your  business  in  the  long  run,”  Gauch¬ 
erin  says.  “Over  and  over  I’ve  had  con¬ 
versations  with  clients  who  are  about 
to  buy  an  expensive  piece  of  software, 
and  it  looks  very  much  like  a  short¬ 
term  value.” 

It’s  also  important  to  think  enter¬ 
prisewide,  not  merely  department  by 


department.  “The  easy  departments  to 
pick  off  for  portal  projects  are  those 
that  stand  alone,”  says  Rugare.  A  hu¬ 
man  resources  portal,  for  example, 
may  enable  employees  to  enter  their 
own  address  changes  into  the  HR  sys¬ 
tem  and  thus  eliminate  phone  calls  to 
HR  staffers.  But  that  doesn’t  solve  the 
problem  of  updating  all  corporate  sys¬ 
tems  with  the  change. 

“Clearly,  if  you  can  implement  a 
portal  that’s  integrated  to  your  supply 
chain,  your  suppliers  and  partners  or 
distributors,  or  to  your  customers,  the 
value  goes  up  almost  geometrically,” 
he  says.  ► 


Winkler  writes  about  the  management 
of  technology  from  Seattle  and  is  Com- 
puterworld’s/ormer  New  York  bureau 
chief  Contact  her  at  winklerconnie@ 
yahoo.com. 


Finding  the  Real  Need:  Productivity 


Southwire  Co.,  a  $1.7  billion,  Carrollton, 
Ga.-based  manufacturer  of  cable  and 
wire,  didn’t  set  out  in  1999  to  build  an 
idea!  portal.  The  privately  held  firm  just 
wanted  a  spot  on  the  Web  where  cus¬ 
tomers  could  place  orders.  It  also  want¬ 
ed  to  clean  up  multiple  internal  and  cor¬ 
porate  Web  sites,  which  had  been  set 
up  by  IT  on  behalf  of  various  depart¬ 
ments,  each  using  different  Web  devel¬ 
opment  software. 

But  four  years  later,  Southwire’s  portal 
is  yielding  impressive  business  results. 
Customer  orders  are  up  33%,  and  25% 
of  all  orders  are  electronic,  with  online 
customers  ordering  twice  as  many  items 
as  those  who  place  orders  via  fax,  tele¬ 
phone  or  electronic  data  interchange. 
And  thanks  to  content  management  and 
workflow  capabilities  added  in  the  past 
year,  Southwire's  managers  can  approve 
and  post  announcements  to  the  portal, 
without  involving  IT. 

“We  had  several  independent  Web 
sites  and  a  fairly  robust  e-commerce 


site.  The  portal  provides  an  umbrella  to 
bring  all  those  separate  Web  sites  under, 
along  with  providing  a  single  sign-on, 
multilevel  security  access,  customization 
and  personalization,”  says  Sheila  Simp¬ 
son,  a  Web  development  manager  in 
Southwire’s  IT  Services  group.  The  un¬ 
derlying  portal  technology  is  from  Sy¬ 
base  Inc.  in  Dublin,  Calif. 

“Southwire  was  trying  to  be  ahead 
of  the  game  -  at  the  urging  of  our  CEO,” 
recalls  Simpson.  “With  all  this  Internet 
hoopla,  the  thinking  was  that  surely  there 
was  something  we  could  do  with  it.” 

The  portal  was  first  funded  as  a  re¬ 
search  and  development  effort,  separate 
from  IT  services.  Southwire's  initial  por¬ 
tal  offered  only  1,200  commonly  ordered 
products  out  of  the  company’s  65,000 
stock  numbers. 

The  emphasis  wasn’t  on  creating  a 
“pretty  front-end  storefront”  for  the  or¬ 
dering  site,  according  to  Simpson.  The 
true  business  need  was  cutting  costs 
associated  with  processing  lots  of  paper 


and  increasing  productivity. 

“We  didn't  want  the  behind-the- 
scenes  manual  processing,”  says  Simp¬ 
son.  “Southwire  [in  2000  and  2001]  was 
hit,  like  a  lot  of  other  companies,  with 
trying  to  become  more  efficient.  We  did 
not  need  to  create  more  work,  we  need¬ 
ed  to  eliminate  work,  to  streamline," 
she  says. 

Thus  came  the  emphasis  on  integrat¬ 
ing  the  order  site  to  the  back-end  sys¬ 
tems.  The  company  eliminated  a  signif¬ 
icant  chunk  of  manual  work,  which 
means  fewer  telephone  calls  to  answer 
and  less  faxed  information  to  rekey  into 
the  computer  system. 

The  push  to  streamline  operations  is  a 
big  part  of  the  portal  popularity,  and  not 
just  at  Southwire,  according  to  Raj  Shah, 
manager  of  business  consulting  at  Sapi¬ 
ent.  "They're  looking  for  consolidation  of 
systems  and  processes ...  and  portals 
are  the  [user  interface]  of  technology 
consolidation." 

-  Connie  Winkler 
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A  Setup  for 
A  Security 
Nightmare 

Lessons  learned  at  the  Department 
of  Energy  can  be  applied  to  the 
corporate  world.  By  Dan  Verton 


Notra  Trulock's  book,  Code  Name 
Kindred  Spirit,  offers  corporations  a 
lesson  in  being  vigilant  about  security. 


MORE  ONLINE 


For  the  full  interview  with  Notra  Trulock, 
visit  our  Web  site: 


OQuickLink  36445 
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A  new  book  by  Notra  Tru¬ 
lock,  former  director  of 
intelligence  at  the  U.S. 
Department  of  Energy, 
details  how  apathy  and  politics  can  in¬ 
fect  the  decision-making  of  senior  man¬ 
agers  and  create  a  security  nightmare 
for  frontline  administrators. 

Code  Name  Kindred  Spirit  (En¬ 
counter  Books,  2003)  takes  readers  in¬ 
side  the  Chinese  nuclear  espionage 
scandal  that  occurred  between  1995  and 
2001  at  the  Los  Alamos  National  Labo¬ 
ratory  and  led  to  the  DOE’s  investiga¬ 
tion  of  nuclear  scientist  Wen  Ho  Lee. 
Trulock  also  sheds  new  light  on  how  se¬ 
nior  DOE  management  contributed  to 
the  appalling  state  of  computer  and  en¬ 
terprise  security  that  contributed  to  the 
possible  disclosure  of  the  U.S.’s  most 
sensitive  nuclear  secrets. 

In  an  interview  with  Computerworld, 
Trulock  offered  insight  into  how  mis¬ 
management  of  security  issues  at  the 
highest  levels  of  an  organization  can 
have  devastating  results. 


In  your  book,  you  wrote  about  many  man¬ 
agement  and  leadership  shortcomings  at  the 
DOE,  and  especially  how  those  shortcom¬ 
ings  had  a  debilitating  effect  on  enterprise 
security.  Can  you  expand  on  a  few  examples 
that  might  offer  some  sober  lessons  for 
large  corporations?  Most  importantly,  I 
think,  security  was  sharply  devalued 
by  the  Energy  Department  and  senior 
lab  managers  during  the  1990s.  It  is 
common  knowledge  that  budgets  were 
run  down  and  both  manpower  and 
training  were  sharply  cut  back.  By  far 


the  worst  offense,  however,  was  the 
corruption  and  manipulation  of  securi¬ 
ty  standards  and  measures  of  perfor¬ 
mance  imposed  by  these  officials. 

Time  and  again,  senior  managers 
fudged  or  simply  suppressed  the  re¬ 
sults  of  security  exercises,  evaluations 
and  self-assessments.  More  than  once, 
senior  lab  managers  were  caught  red- 
handed  pressuring  security  officials  to 
revise  upward  poor  marks  on  security 
exercises.  In  other  cases,  the  outcomes 
of  such  exercises  were  rigged  to  con¬ 
ceal  vulnerabilities.  Inevitably,  senior 
management  officials  also  had  to  sup¬ 
press  and  silence  those  security  offi¬ 
cers  unwilling  to  go  along  with  the 
coverups. 


You  also  wrote  that  you  “witnessed  many 
incidents  in  which  Cl  [counterintelligence] 
officers  were  asked  to  report  on  the  same 
people  who  wrote  their  performance  ap¬ 
praisals,  granted  raises  and  approved  bud¬ 
gets.”  What  lessons  and  suggestions  should 
come  out  of  this  for  large  corporate  security 
programs  that  might  be  wrestling  with  find¬ 
ing  the  right  management  structure?  I 
don’t  know  whether  the  problems  I 
witnessed  are  unique  to  the  national 
labs.  As  counterintelligence  was  de- 
emphasized  [along  with  security]  at 
the  labs  in  the  1990s,  Cl  units  were 
pushed  further  down  the  lab  structure 
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to  the  point  that  multiple  layers  of  man¬ 
agement  existed  between  Cl  officers 
and  the  lab  director.  Consequently,  Cl 
[and  security]  problems  rarely  were 
brought  to  the  attention  of  the  lab  di¬ 
rectors  or  their  senior  management 
group.  For  a  time  at  Los  Alamos,  the  Cl 
[group]  reported  to  a  unit  that  was  also 
responsible  for  hallway  maintenance 
and  replacing  burnt-out  light  bulbs. 

First  and  foremost,  large  corporate 
enterprise  security  units  should  enjoy 
high  visibility  within  the  enterprise 
and  report  directly  to  either  the  chief 
executive  or  chief  operating  officers. 
The  further  down  a  [security]  unit  is  in 
the  corporate  structure,  the  greater  the 
potential  for  interference  and  obstruc¬ 
tion  in  the  performance  of  the  unit’s 
mission. 

For  companies  that  have  large  volumes  of 
intellectual  capital  and  proprietary  research 
to  protect,  what  is  your  advice  on  how  to 
achieve  an  appropriate  level  of  security 
while  at  the  same  time  maintaining  enough 
flexibility  to  remain  competitive?  The 
1990s  were  a  period  in  which  senior 
managers  refused  to  think  through  the 
long-term  implications  of  losing  se¬ 
crets  vs.  the  short-term  political  bene¬ 
fits  of  openness  or  declassification.  In 
an  enterprise  setting,  I  suppose  this 
would  entail  deciding  what  is  worthy 
of  protection  and  what  senior  man¬ 
agers  might  be  willing  to  concede  to 
potential  competitors.  The  costs  of 
lost  or  stolen  data  would  have  to  be 
factored  into  such  an  equation.  Flexi¬ 
bility  might  not  be  valued  so  highly  if 
the  loss  of  sensitive  data  undercut  an 
enterprise’s  competitiveness. 

You  mention  one  instance  in  which  a  lab 
director  simply  crossed  out  classification 
markings  on  a  document  and  released  it  to 
the  media.  We  now  know  that  the  document 
in  question  contained  sensitive  information. 
What  should  corporate  security  managers 
do  when  confronted  with  similar  situations? 

I  assume  you  mean  beyond  updating 
his  or  her  resume  and  looking  for  a  new 
job?  Security  managers  can  try  a  slow, 
steady  process  of  educating  the  CEO 
to  the  potential  downsides  of  lax  secu¬ 
rity.  I  know  of  one  Fortune  100  corpo¬ 
ration  whose  world-famous  CEO  total¬ 
ly  disdained  security  of  any  type  and 
made  nearly  all  corporate  locations 
open  campuses.  He  retired  just  before 
9/11  and  left  his  successors  a  staggering 
problem  of  how  to  protect  corporate 
assets  worldwide  against  terrorists  de¬ 
termined  to  attack  symbols  of  Ameri¬ 
can  economic  power.  His  successors 
had  to  start  from  scratch  to  rebuild  se¬ 
curity  at  the  corporation’s  facilities.  ► 
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PAUL  BRINKLEY,  vice 
president  and  CIO  at 
JDS  Uniphase  Corp.,  a 
$1.1  billion  fiber-optics 
company  in  San  Jose, 
has  cut  corporate  IT  ex¬ 
penditures  by  $35  mil¬ 
lion  annually  by  out¬ 
sourcing  its  Oracle  ap¬ 
plications  (data  center, 
product  data  manage¬ 
ment  and  help  desk  support)  to  an  unlikely 
vendor  -  Oracle  Corp.  itself.  JDS  has  used 
Oracle  software  for  the  past  three  years  in 
application  service  provider  (ASP)  deals 
with  Quest  Software  Inc.  and  Corio  Inc. 

Brinkley  talked  with  Computerworld’s 
Jean  Consilvio  about  JDS’s  decision  to 
outsource  to  Oracle,  which  in  an  effort  to 
bolster  sagging  sales  has  been  lobbying 
customers  to  pay  it  to  run  and  manage  its 
own  Oracle  products. 

What  made  you  outsource  to  Oracle?  We 

moved  to  Oracle  as  a  turnkey  solution 
provider  for  their  application.  They’re  provid¬ 
ing  software,  hardware  and  integrated  com¬ 
plete  end-user  services.  This  has  enabled  us 
to  consolidate  all  of  our  [Oracle]  support  [for 
all  of  our  global  business  operations],  so 
there’s  a  single  point  of  accountability  for 
end-user  services.  We  also  agreed  to  up¬ 
grade  to  Hi,  and  we  didn't  want  to  deal  with 
multiple  solution  providers  or  independent 
support  and  consultant  firms  doing  an  11i 
upgrade  on  the  timeline  we  needed  to  pur¬ 
sue;  we  did  it  in  six  months  globally. 

What  effect  will  this  have  on  your  IT  folks? 
The  company  has  always  been  dedicated  to 
an  outsourced  IT  model,  so  we  didn't  have 
internally  a  lot  of  people  doing  these  func¬ 
tions.  Two  things  help  keep  head  count  low: 
a  single-instance  environment ...  so  we 
don't  have  people  who  support  an  ERP  sys¬ 
tem  dedicated  to  a  single  site  or  business 
unit,  and  [second]  because  it's  outsourced. 

The  company  first  went  with  Quest  as  an 
ASP  three  years  ago.  Quest  did  well  in  some 
things  and  struggled  in  others,  so  other 
firms  were  brought  in  to  supplement  Quest. 
And  it  just  grew  in  complexity. 

How  did  you  estimate  the  savings?  We  pay 

a  fixed  amount,  and  it’s  a  [large]  part  of  my 
IT  budget.  Our  company  has  gone  through  a 
significant  operational  restructuring  to  cen¬ 
tralize  a  lot  of  functions.  This  deal  was  the 
trigger  that  allowed  us  to  rescale  our  IT  op¬ 
erating  expenses.  We’ve  gone  through 
tremendous  growth,  from  a  very  small  com¬ 
pany  to  a  $4  billion  company,  and  now  with 
the  telecom  decline,  we’ve  radically  had  to 
scale  [everything  companywide]  back  down. 


JOHN  BERRY 


ROI:  Whose  Job 
Is  It,  Anyway? 


RECENTLY,  I  conveyed  the  elements  of  a 
comprehensive  return-on-investment 
program  to  the  IT  organization  of  a 
small  but  fast-growing  company.  The 
presentation  included  how  a  financial 
forecast  looked,  how  the  company  needed  to  plan  for 
change  when  the  metrics  in  the  forecast  hinted  at  it, 
and  why  the  auditing  of  actual  postinvestment  re¬ 
turns  was  a  good  idea. 


About  two-thirds 
through,  one  of  the  senior 
IT  fellows  interrupted 
me,  questioning  the  will¬ 
ingness  of  business  units 
to  adopt  these  practices. 

“Glad  you  asked,”  I  said. 

I  turned  the  question 
around  and  asked  why  the 
IT  group  —  curious 
enough  about  better  prac¬ 
tices  in  IT  management 
to  have  me  come  in  to 
demonstrate  some  tech¬ 
niques  —  couldn’t  evolve 
into  a  value-added  busi¬ 
ness  partner  that  could 
help  business  units  with  economic 
value  management  tasks. 

For  example,  a  business  unit  would 
request  a  custom  or  packaged  appli¬ 
cation,  and  IT,  working  in  partner¬ 
ship,  would  deliver  an  economic 
forecast,  change  management  tactics 
and  perhaps  a  method  for  quantify¬ 
ing  the  intangible  ROI  and  a  post¬ 
investment  audit  capability. 

The  IT  executive  smiled,  nodding 
in  agreement.  Could  his  response 
have  been  more  out  of  politeness 
than  conviction  that  what  I  said  was 
tenable  at  his  company?  Yes,  talk  is 
cheap. 

Overlooked  but  very  much  needed 
amid  all  the  buzz  about  quantifying 
financial  returns  on  IT  investments 
are  answers  to  some  basic  questions. 


Who  is  willing  and  able 
to  roll  up  their  sleeves 
and  get  into  the  mechan¬ 
ics  of  building  a  forecast? 
Who  will  build  consensus 
for  the  metrics  to  be  in¬ 
cluded  in  the  forecast? 
Who  will  document  the 
potential  organizational 
and  business-process 
change  some  software  is 
sure  to  inject  into  the 
company? 

In  other  words,  who  is 
going  to  champion  a  con¬ 
sistent,  repeatable  IT 
measurement  program 
and  see  that  it  happens  and  thrives? 

Theoretically,  there  is  no  reason 
why  economic  value  management 
practices  can’t  originate  and  become 
operational  in  the  IT  organization. 
But  the  politics  of  the  situation  say 
otherwise. 

In  reality,  the  broad  trend  has  been 
for  such  a  management  course  to 
originate  in  business  units,  which  in¬ 
creasingly  have  control  over  discre¬ 
tionary  IT  budget  expenditures.  The 
IT  organization’s  budget,  meanwhile, 
is  largely  confined  to  life-cycle  man¬ 
agement  expenditures,  upgrades,  re¬ 
placements  and  maintenance. 

However,  with  control  comes  ac¬ 
countability.  Lines  of  business  can 
chart  their  technological  destinies, 
but  senior  management  is  also  hold¬ 
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ing  them  accountable  for  the  returns 
their  investments  deliver.  This  com¬ 
pels  business  units  to  manage  the 
risks  and  uncertainties  of  their  in¬ 
vestment  decision-making.  This  is 
accomplished  by  adding  clarity  to 
these  decisions  —  economic  fore¬ 
casts,  metrics  construction,  the 
whole  measurement  megillah. 

Now,  square  the  budgeting  trends 
and  related  measurement  responsi¬ 
bility  with  an  equally  important  real¬ 
ity  showing  IT’s  genuine  interest  in 
busting  out  of  its  utility  services  role. 
In  the  case  of  this  high-growth  com¬ 
pany,  the  IT  group  aspires  to  partici¬ 
pate  at  a  more  strategic  level. 

Contemplate  the  tension:  Budget¬ 
ing  realities  are  driving  accountabili¬ 
ty  (meaning  ROI  mania)  to  business 
units,  while  IT  seeks  to  participate 
more  fully  in  the  strategic  affairs  of 
the  company  by  playing  a  larger  role 
in  ROI  measurement  and  related  ac¬ 
tivities.  The  business  side  might  very 
well  wish  to  relinquish  measurement 
to  IT,  but  senior  management  is  say¬ 
ing,  “You  want  that  $500,000  CRM 
application?  Then  you  show  me  the 
value,  since  you  have  the  budget.” 

As  it  turns  out,  this  company’s  IT 
budgeting  is  centralized,  not  in  defi¬ 
ance  of  the  trend,  but  most  likely  be¬ 
cause  of  its  size.  As  its  revenue 
grows,  as  its  need  for  complex  appli¬ 
cations  grows,  it  might  decentralize 
budgeting  too.  Today,  IT  in  this  com¬ 
pany  is  excited  about  the  chance  to 
lead  a  transformation  effort  that  em¬ 
beds  forecasting  and  measurement  in 
investment  decision-making. 

Business  units  that  avoid  the  heavy 
lifting  of  IT  economic  value  manage¬ 
ment,  pinch  yourselves.  This  sce¬ 
nario  is  likely  not  the  future.  I 
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Cybernet  has  created  the  most  common  sense  PC  ever 


That’s  right!  We’ve  gotten  rid  of  the  Box. 


Pentium®/// 

I  mam 


Wondering  how  we  were  able  to  put  an  entire 
PC  BOX  inside  a  normal  size  keyboard? 

Smart  design  and  common  sense. 


Zero-Footprint-PC  M 

with  LCD  flat  screen  monitor 


PACKAGE  #  ZPC-2030  INCLUDES: 
Intel  Pentium  III  Processor  @ 
866MHz.  128MB  RAM.  40GB  HD. 
24X  CDRom.  15  LCD  Flat  Screen 
Monitor.  PS2  Mouse.  Microsoft 
Windows®  XP  Home  Edition 


Units  available  in  black  or  beige. 

All  Zero-Footprint-PC  Elite-ll  models  come  standard  willi:  Intel 
Pentium  III  processor  or  Intel  Celeron  processor  with  64  MB  RAM 
upgradeable  to  1GB.  40GB  IOE-7200RPM  hard  disk  (upgradeable 
to  any  size.  std.  3.5”  IDE).  10/100  ethernet  (LAN).  2  Serial. 
1  parallel.  4  USB  and  2  PS/2  ports,  3D  AGP  video.  1  PCI 
expansion  slot,  built  in  speakers  and  3D  sound 
...all  built  inside,  all  backed  by  a  2  yearwarranty. 


Masks' space 


Optional  Features:  CD  or  CDRW/DVD  combo.  1.44MB  slim 
floppy  drive.  56K  internal  modem,  dual  video.  TV  out,  your 
choice  of  LCD  flat  screen  displays  (touch  screen  available). 
Microsoft  Windows  9X  /2K  /NT  /XP 


Now,  enjoy  the  extra  space  and  save 
money. 

Zero-Footprint-PC  is  ideal  for  IT  managers  or 
any  individual  PC  user  looking  to  save  space. 


Space  Sit  \ ting  technplpgy 


yv^.'r  •  \cy.'}0r.  ,  *  For  different  options  and  models  visit  us  at: 

;  ■  or  call:  or  call  toll  free 
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New!  APC  solves  top  4  rack  problems 


TOP  FOUR  RACK-BASED  PROBLEMS 


1 

PROBLEM 

SOLUTION 

m 

Cabling 

Nightmares 

Additional  enclosure  depth  for  better 
cable  management  and  power  distribution 

2 

Hot  Spots 

Optimal  cooling  distribution  and  heat 
exhaust  for  rack  environments 

3 

Blown  Circuit 
Breakers 

Monitoring  of  power  and  environment  at 
rack  helps  avoid  downtime 

4 

Brand 

Incompatibility 

Vendor-neutral  mounting  backed  up  by 
"Fits  like  a  Glove"*  money-back  guarantee 

Benefit  today  from  optimal  cable  management, 
effective  cooling,  and  remote  power  distribution, 
The  NetSheiter®  VX  rack  enclosure  supports  your 
entire  data  environment,  including  servers,  net¬ 
working  and  communications,  and  storage  devices. 


With  a  full  range  of  compatible  APC  components, 
you  can  customize  a  solution  to  fit  current  avail¬ 
ability  needs,  and  build  upon  this  foundation  as 
future  requirements  change.  Why  wait?  To  find  out 
more  today,  visit  us  online  at  www.apc.com. 


NetSheiter®  VX  Enclosures  ( x -  r. f r t i  f i  f n  i 


Next  generation,  high-quality  enclosures 

•  Fully  ventilated  front  and  rear  doors  with  enhanced  ventilation  pattern  maximize  airflow 

•  Overhead,  base  and  side  cable  access  provides  easy,  integrated  cable  management 

•  Rear  Cabling  Channel  (42"deep  versions  only)  allows  for  easy  installation, 
access  and  serviceability  of  both  data  cables  and  power  distribution 

•  Available  in  multiple  configurations:  35.5"  deep,  42"  deep,  beige  or  black 

NetShalter®  Open  Frame  Ranks  ix -rpRiiFiFm  f4-pnstnniyi 


Economical  solutions  for  wiring  closets  and  networking  applications 

•  Designed  to  accommodate  networking  devices  such  as  hubs,  routers  and  switches 

•  Industry  standard  7'  high  design  provides  45U  of  equipment  mounting  space 

•  Self-squaring  design  allows  one-person  assembly 

•  Made  of  high-strength  8061 -T6  structural-grade  aluminum 


Air  Distributioa  Unit  tADU)  IX-CFRTIFlFDi 


2U  rack-mounted  fan  unit  distributes  cool  air  to  rack  enclosure  equipment. 

.  For  racks  up  to  3kW  of  power  consumption  on  raised  floors 
.  Adds  30%  efficiency  air  filtration  to  supply  air  for  equipment  intake 
.  Delivers  equalized  airflow  from  the  bottom  to  the  top  of  the  rack  enclosure  with  dual  fans 
.  Adjustable  depth  to  fit  most  leading  enclosures 


Air  Removal  Unit  (ARU)  i x- cfrti fi Fm 

Heat  removal  for  enclosures  in  IT  rooms  and  data  center  hot  spots 

.  Enables  up  to  7.5kW  of  power  consumption  in  a  rack,  without  taking  up  U  space 
.  Automatic  fan  speed  adjustment  leads  to  greater  energy  efficiency 
.  Dual-power  input  cords  allow  the  unit  to  attach  to  redundant  power  sources 
.  Ducting  kit  to  drop  ceiling  plenum  allows  higher  temperature  from  equipment  exhaust 
to  be  delivered  directly  to  A/C  return  stream 


Power  Distribution  Units  ix-r.FRTiFiFm 

Distribute,  monitor,  and  remotely  control  power  in  rack  enclosures 

•  Basic:  Vertically  and  horizontally  mounting  with  a  range  of  amps  ^ 
and  voltages 


•  Metered:  Ability  to  monitor  the  current  draw  and  set  alarm  thresh¬ 
olds  that  when  exceeded,  provide  both  visual  and  audible  alarms 


*  MasterSwitch®:  Advanced,  remote  power  distribution  and 
control.  User  configurable.  Users  can  configure  the  sequence  in 
which  power  is  provided  to  individual  receptacles  upon  start  up 


Environmental  Monitoring  Unit  ix-r frtififdi _ 

Monitors  environmental  conditions  in  racks  and  rooms  ^ 

•  Sensors  continuously  monitor  the  temperature  and  humidity  of  environment 

•  Four  user-definable  external  inputs  allow  use  with  sensors  for  fire, 
water,  smoke,  unauthorized  entry  and  physical  security 

•  Communicates  information  in  a  variety  of  formats  to  ensure  that  your  application  is  supported 


LCD  Monitors  ix-r. ffitififpi 

Rack-mount  LCD  monitors  save  space  in  IT  environments 

•  Provides  optimal  functionality  while  utilizing  only  1 U  (1 .75")  of  rack  space 


FREE  APC  Rack  Power  Distribution 
Unit  for  the  first  100  entrants! 

Get  yours  today!  Visit  http://promo.apc.com  Key  Code  j561y  •  Call  888-289-APCC  x6516  •  Fax  401-788-2797 

©2003  American  Power  Conversion  Corporation.  All  Trademarks  are  the  property  of  their  owners  •  E-mail:  esupport@apcc.com  •  132  Fairgrounds  Road,  Wost  Kingston,  Rl  02892  USA  •  APC103EF-US 


Legendary  Reliability" 


iTicareers 

_ 


IT  CAREERS 


iTiCareers.com 


Advertising  Supplement 


IT  CAREERS  IN  FINANCIAL  SERVICES 


Among  the  most  aggressive  industries  using 
information  technology  to  enable  business  is 
financial  services.  Despite  the  upheaval  of  the 
past  two  years,  the  industry  continues  to  lean 
on  information  technology  and  its  profession¬ 
als  to  drive  change  in  the  future.  Over  the  next 
12  to  48  months,  the  priorities  for  the  industry 
-  whether  a  traditional  banking  institution  such 
as  Wells  Fargo  or  E*Trade,  which  introduced 
online  trading  20  years  ago  -  fall  into  four 
categories:  security,  peer-to-peer  networking, 
mobility  and  web  applications. 

The  issue  of  security  was  evident  when  the 
Slammer  worm  hit  the  Internet  in  January, 
closing  down  ATMs  across  the  country  for  at 
least  part  of  the  weekend.  For  E*Trade,  which 
has  the  second  largest  automatic  transaction 
machine  network  in  the  United  States,  that  kind 
of  problem  is  a  killer.  Peer-to-peer  networking  is 
an  issue  for  Wells  Fargo  as  it  consolidates  nation¬ 
wide  operations.  And  for  Edward  Jones,  extend¬ 
ing  the  business  capability  and  service  to  custom¬ 
ers  through  mobility,  new  web  applications  and 
security  is  a  model  for  what  most  institutions  face. 


ming,  database  development,  system  programming 
and  administration,  and  network  and  technical 
architecture.  "We  look  for  people  who  have  dem¬ 
onstrated  the  ability  to  learn  new  skills,"  says  Gee. 
"So  if  you  don't  have  Java  but  have  proven  to  be 
an  excellent  programmer  in  another  language, 
we'll  help  you  get  that  capability." 


Rodney  Gee,  general  principal  over  human 
resources  in  information  systems  at  Edward  Jones, 
has  a  short  list  in  terms  of  priorities  for  IT  profes¬ 
sionals  in  the  future.  The  base  is  technical  skills, 
which  at  Jones  translates  to  Java-based  program- 


Edward  Jones,  headquartered  in  St.  Louis,  supports 
a  world  network  of  locations,  and  IT  pros  align 
to  the  businesses.  "So  it's  important  to  be  able 
to  leverage  the  capabilities  of  a  teammate,"  says 
Gee.  "At  Jones  that  is  much  more  important  than 


your  abilities  as  a  lone  ranger.  And,  probably,  the 
biggest  thing  needed  before  folks  move  on  in  their 
careers  is  understanding  the  bigger  business  con¬ 
text  and  how  IT  can  enable  that  business  model." 

Keith  Irwin,  manager  of  learning  and  development 
at  Wells  Fargo  Services,  says  creating  this  type 
of  workforce  encompasses  myriad  programs.  His 
group  provides  more  than  350  courses  online. 

The  courses  are  configured  into  maps  that  track 
with  Wells  Fargo's  careers  of  the  future.  "There's 
no  one  thing  that  keeps  me  awake  at  night,"  he 
admits.  "It's  the  full  range.  In  financial  services, 
we're  still  using  mainframes,  but  we  also  are 
moving  rapidly  in  the  areas  of  web  applications 
to  deliver  services  to  customers. 

"That  means  we're  working  to  cover  all  the 
bases  because  we  can't  afford  to  fall  behind  in 
any  one." 


IT  Careers 

For  further  information,  please  contact: 

Nancy  J.  Percival,  Director,  Recruitment  Advertising 

at  800-762-2977 

500  Old  Connecticut  Path 

Framingham,  MA  01  701 

Produced  by  Carole  R.  Hedden 


Today,  The  Nasdaq  Stock  Market® 
is  the  largest  and  fastest  growing 
stock  market  in  the  United  States, 
listing  over  3,800  of  the  world's 
most  innovative  companies.  We 
are  currently  looking  to  fill  the  fol¬ 
lowing  positions  in  Trumbull,  CT: 

Systems  Analysts  (Code#200301) 
Systems  Analysts  (Integrator) 
(Code  #200302),  System  Analysts 
(TAL)  (Code  #200303),  Senior 
Systems  Analysts  (Code  #200304) 
and  Software  Engineers  (Code 
#200305) 

You  will  analyze,  implement,  main¬ 
tain  and  support  HP  NonStop/ 
Tandem-based  real-time  stock  trad¬ 
ing  systems.  Systems  Analysts  re¬ 
quire  min.  1  yr.  exp.  as  Systems/ 
Technical  Analysts.  Some  positions 
require  knowledge  of  TAL,  pTAL, 
Postgre  SQL  and  Oracle  8.0  tech¬ 
nologies.  Sr.  Systems  Analyst  and 
Software  Engineering  positions 
require  knowledge  of  Guardian  and 
UNIX/OSS  operating  environments 
and  min.  2  yr.  exp.  Software  Engin¬ 
eer  positions  requires  master's 
level  degree.  Please  send  resum¬ 
es,  indicating  code  #  you  are  apply¬ 
ing  for,  to:  The  NASDAQ  Stock 
Market,  Inc.,  Human  Resources,  45 
Commerce  Drive,  Trumbull,  CT 
06611,  or  e-mail  resumes  to: 
careersCT@nasdaq.com.  Only 
qualified  candidates  will  be  contact¬ 
ed.  We  are  an  equal  opportunity 
employer  committed  to  diversity  in 
the  workplace. 


ALGORITHM  DEVELOP¬ 
MENT  ENG  -  Designs 
and  develops  pattern 
recognition  algorithms  for 
medical  applications. 
Master’s  degree  in 
Elec./Computer  Eng.  Will 
pay  prevailing  wage. 
Send  resume  to  Ziling 
Huo,  Beckman  Coulter, 
Inc.  11800  SW  147th 
Ave.,  Miami,  FL  33196  or 
fax  to  (305)-380-3647. 


f7ijET2  S 

NET2S  is  a  leading  International 
Consulting  and  Engineering  firm 
specializing  in  communications 
technologies.  We  are  presently 
seeking  to  fill  the  following  posi¬ 
tions: 

Business  Analyst  (NYC) 

Develop  and  implement  marketing 
strategies.  Manage  sales  life  cycle 
including  client  presentations  and 
negotiations.  Oversee  project 
management  including  deploy¬ 
ment  and  roll  out.  Co-manage  pro¬ 
ject  center. 

Must  possess  excellent  communi¬ 
cation  skills  as  well.AII  positions 
require  BS/MS  degree  with  a  min¬ 
imum  of  2  to  3  years  of  experience 
in  the  field.  Must  possess  excel¬ 
lent  communication  skills  as  well. 
NET2S,  82  Wall  Street  Suite  400, 
New  York,  NY  10005;  Fax:  (212) 
279-  1960;  Phone  (212)  279-6565; 
or  Email:  iobus-nv@net2s.com 


EXPERIENCED  IT 
PROS  NEEDED 

DBAs,  P/A,  &  Proj.  Managers  to 
design,  develop,  admin,  and 
support  DBs:  Sybase,  SQL 
Server,  Informix,  Oracle&  Rdb. 
Disaster  recovery  plan/imple- 
ment,  per.  tuning,  back  up/ 
restore,  and  troubleshoot. 
Expert  in  WinNT,  VAX/VMS, 
SCOUnix,  TCP/IP,  PowerBuild¬ 
er,  Access,  and  C++.  MS 
Proxy/SMS  Server  &  IIS  to 
develop  web  DB  applications. 
Expert  RDB  theories,  CASE  & 
RDBMS  physical  implementa¬ 
tions  required.  Job  Location: 
San  Francisco  Area  and 
Phoenix.  Please  submit  resume 
to:  Apex  Software,  Inc.,  4718  E. 
Cactus  Road,  #206,  Phoenix, 
AZ. 85032 


SOFTWARE  ENGINEERS  (12 
positions):  require  Bachelor’s  or 
equivalent  in  Engineering/Com¬ 
puter  Science/Mathematics/Sci¬ 
ence  or  closely  related  field  with 
experience  providing  skills  in 
described  duties.  Competitive 
salary  and  benefits.  Provide  on-site 
consulting  in  design,  analysis  and 
development  of  software  applica¬ 
tions  for  legacy  systems  in  IBM 
mainframe  environment;  develop¬ 
ment  and  administration  in  Oracle, 
DB2,  SQL  Server  and  Sybase;  e- 
commerce  and  web  applications 
development  in  Microsoft,  Java  and 
related  technologies;  network  man¬ 
agement  systems  development 
with  Netscape  Server  and  related 
tools;  SAP  R/3  applications  on 
Windows  with  DOS  and  ABAP/4 
and  related  modules.  40%  travel  to 
client  sites  in  the  United  States. 
Mail  resumes  to:  Vice  President, 
Y&L  Consulting,  Inc.,  7550  I  H  10 
West,  Suite  940,  San  Antonio,  TX 
78229. 


Seeking  qualified  applicants  for  the 
following  positions  in  Memphis/ 
Collierville,  TN:  Senior  Business 
Applisaiian  Analyst.  Formulate/ 
define  systems'  scope  and  objec¬ 
tives  based  on  user/customer 
needs  and  a  good  understanding  of 
applicable  business  systems  and 
industry  requirements.  Require¬ 
ments:  Bachelor's  degree*  in  com¬ 
puter  science,  math,  statistics, 
business  or  related  field  plus  5 
years  of  experience  in  analyzing 
business  systems  and  developing 
technical  automated  solutions. 
Experience  with  business  case 
development  and  project  manage¬ 
ment  tools  (e.g.,  Primavera  Project 
Planner,  TeamPlay,  MS  Project  or 
MS  Access)  also  required. 
‘Master’s  degree  in  appropriate 
field  will  offset  2  years  of  general 
experience.  Submit  resumes  to 
Sibi  George,  FedEx  Corporate 
Services,  1900  Summit  Tower 
Blvd.,  Suite  1400,  Orlando,  FL 
32810.  EOE  M/F/D/V. 


Telecheck  Services,  Inc.,  a 
Division  of  First  Data  Corpor¬ 
ation,  a  company  in  Greenwood 
Village,  CO  specializing  in  check 
guarantee,  has  an  opening  for 
an  Intermediate  Software 
Developer  to  work  in  Houston, 
Texas  and  other  unanticipated 
job  sites  in  the  U.S..  Engage  in 
full  life-cycie  software  develop¬ 
ment  involving  object-oriented 
design  and  development. 
Requires  a  bachelor's  degree  in 
computer  science;  experience 
implementing  and  integrating 
ORACLE  products;  and  working 
knowledge  of  C,  C++,  Java, 
Shell  Scripts,  Windows  2000, 
SQL,  and  Unix.  Respond  by 
resume  to  Norm  Barnett,  First 
Data  Corporation,  6200  S. 
Quebec  St.,  Suite  #2000  West, 
Greenwood  Village,  CO  80111 
and  refer  to  job  #3963DE. 


Software  Engineer  wanted  at 
NY  office  of  Empact  Solutions  to 
design,  develop,  test,  implement 
and  provide  maintenance  sup¬ 
port  for  EyeQ  software.  Must 
have  analytical,  trouble  shoot¬ 
ing,  and  problem  solving  skills. 
Experience  with  Java,  JSP, 
Servlet,  ASP,  Per!,  and 
Win2000.  Design  and  document 
capability  with  UML.  Experience 
with  use  cases,  class  diagrams, 
sequence  diagrams  and  state 
diagrams.  Database  knowledge 
with  Oracle,  DB2,  and  SQL 
Server/  Analysis.  Hands  on  pro¬ 
gramming  with  EJB,  J2EE,  XML, 
and  C++.  Must  have  a  BS  in 
Computer  Science  or 
Engineering,  and  at  least  2 
years  of  experience.  Send 
resume  to  NY  Recruiter  at 
careers@empactsolutons.com 
referencing  code  SENG. 
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Sr  Consultant  (dynaSight/SAP 
specialist)  for  comp  s/ware 
dvlpg,  mktg  &  service  co.  in 
Wayne.  PA  for  job  in  Rochester, 
NY.  Duties  incl.:  dsgng  &  dvlpg 
web-based  Business  Intellig¬ 
ence  (Bl)  applies  &  providing 
related  implmtn  svees.  Exten¬ 
sive  travel  required.  Reqs:  Mas¬ 
ter's  or  equiv  in  Bus./Technology 
or  related  field.  5yr  exp  in  job 
offd  or  5yr  exp  in  translating  bus. 
info  reqmts  into  reporting  or  Bl 
solutions.  Applicants  must  have 
significant  SAP  exp,  SAP  BW 
implmtn  exp  &  dynaSight 
implmtn  exp.  Respond  to: 
Michael  Dieterle,  Director  of 
Professional  Sen/ices,  arcplan 
Inc.,  900  West  Valley  Road, 
Suite  204,  Wayne,  PA  19087. 


NEED  TO  HIRE? 
START  WITH  US! 

Call  your  ITcareers  Sales 
Representative  or 
Nancy  Percival  at 
1-800-762-2977. 


Assistant  Director, 
Network  Systems 
Development  and  Support 

The  University  of  Kansas  is  seeking 
an  accomplished  individual  to  play 
a  key  role  in  our  dynamic,  service- 
oriented  information  technology 
environment.  This  new  position 
leads  the  technical  systems  group 
responsible  for  the  development 
and  ongoing  maintenance  support 
of  the  enterprise  communications 
systems  for  KU.  As  part  of  the  NTS 
management  team,  the  successful 
candidate  will  provide  vision  and 
technical  guidance  to  ensure  the 
effective  and  efficient  utilization  of 
communications  technology  at  KU. 

For  complete  information  on  the 
position,  required  qualifications, 
and  application  procedures,  see 
www.nts.ku.edu  or  contact  Ann 
Errney  @  NTS;  1736  Engel  Road, 
Lawrence,  KS  66045  785-864- 
9310  or  email  aermevtcpku.edu. 

Complete  applications  postmarked 
by  April  1 ,  2003  will  be  given  first 
consideration.  EO/AA  Employer. 


Sure 

Nf.tworkWori.d, 

Comi’uterWori.d, 

AND  INFOWORU) 

Help  You  Do  A  Better  Jon. 

Now  Let  Us  Hu  p 
You  Get  One. 


Full-time  Software  Engineer 
Middleware  Developer  responsi¬ 
ble  for  program  design  and  analy¬ 
sis,  coding,  testing  and  imple¬ 
mentation  for  numerous  projects. 
Define  applications  architecture 
and  document  applications  func¬ 
tionality  expansion  and  customer 
integration.  Develop  applications 
requirement  specifications  and 
develop  software  and  documen¬ 
tation  according  to  established 
standards.  Provide  end-user  sup¬ 
port,  identify  and  troubleshoot 
defects  found.  Work  with  Oracle, 
C++,  PL/SQL,  Java,  MQ  Series, 
MSQI,  E-SQL.  Must  have  a 
Bachelors  degree  in  Computer 
Science,  Information  Systems  or 
related  field.  Educational  and  or 
work  background  must  have 
included  the  above-referenced 
skills.  Salary  Competitive.  Send 
resume  to:  Robbin  Lee,  United 
Parcel  Service,  12380  Morris 
Road,  Alpharetta,  GA  30005. 
Employer  will  not  sponsor  visas 
for  position. 


Seeking  qualified  applicants  for  the 
following  positions  in  Memphis/ 
Collierville,  TN:  Senior  Programmer 
Analyst.  Formulate/define  function¬ 
al  requirements  and  documentation 
based  on  accepted  user  criteria. 
Requirements:  Bachelor's  degree’ 
in  computer  science,  MIS,  engi¬ 
neering  or  related  field  plus  5  years 
of  experience  in  systems/applica¬ 
tions  development.  Experience  with 
Java,  C++  and  CORBA  also  re¬ 
quired.  ’Master’s  degree  in  appro¬ 
priate  field  will  offset  2  years  of 
general  experience.  Submit  resu¬ 
mes  to  Sibi  George,  FedEx 
Corporate  Services,  1900  Summit 
Tower  Blvd.,  Suite  1400,  Orlando, 
FL  32810.  EOE  M/F/D/V. 


SR  J2EE/IVR  Devel¬ 
oper.  2+yrs  exp  design, 
develop,  &  implement 
scalable  platforms  at 
least  one  of  which  must 
be  on  large  scale  tele¬ 
phony  sys,  J2EE, 
TomCat,  Apache  Edify  & 
IVR.  Submit  resume  to 
Tracy  Smutko,  Res¬ 
ource  Mgr.  NCS 
Technologies  242  Old 
New  Brunswick  Road, 
Piscataway,  NJ  08854 


Software  Engineers  & 
Programmers: 

Analyze,  design,  test  and  imple¬ 
ment  specialize  software  appli¬ 
cations  for  e-commerce,  Web, 
Client  Server  technologies, 
Legacy  systems  and  distributed 
apps.  in  Weblogic,  Corba, 
Apache,  Mainframe,  ASP,  J2EE, 
PB  and  related  technologies  uti¬ 
lizing  appropriate  RDBMS 
including  Oracle  and  DB2.  HR, 
Instcomp,  Inc.,  906  Lacey  Ave., 
Suite  #206,  Lisle.  IL  60536. 
EOE. 


Software  Engineer:  Design, 
develop,  implement,  test  the 
business  applications  in  areas  of 
data  access,  data  extraction, 
conversion,  migration,  proce¬ 
dures,  data  modeling,  quality 
assurance  using  Oracle  8.0, 
PL/SQL,  Oracle  Designer, 
Developer  2000  and  Oracle 
relational  database  tools  on  a 
Unix  system.  Requires  MS  in 
Comp.  Sci.  Engg/Related  field 
with  2  yrs  exp  or  BS  with  5  yrs 
exp.  Wages:  $90,000/yr,  40 
hrs/wk,  8am-5pm.  Send  2 
resumes  to:  Case#2001 15737, 
Labor  Exchange  Office,  19 
Staniford  St.  1st  FI.,  Boston,  MA 
02114. 


Job  Code  SSA.  Manage  web  and 
eCommerce  projects  using  VB. 
NET,  ASP.NET,  Visual  Basic  5.0/ 
6.0,  HTML,  DHTML,  JavaScript, 
VBScript  ASP,  XML/XSL,  SOAP. 
COM/COM+,  MTS.  SQL  Server 
2000/7.0/6.0,  Oracle.  DB2,  Office 
Object  Model  (VBA),  Seagate 
Crystal  Reports,  IIS  5.0.  System 
Analysis/Reviews,  database  design 
using  ERWIN,  quality  issues  using 
CMM  levels.  Maintain  Ebix  soft¬ 
ware:  Ebix-One,  Ebix-ASP,  Ebix- 
Exchange,  Ebix-SaleSource,  Ebix- 
Mall  and  Elite.  Microsoft  certifica¬ 
tion  as  a  solutions  developer.  BS  + 
2  yr.  of  exp.  in  software  field 
(Requires  1  yr.  exp.  with  Ebix  soft¬ 
ware  packages)  OR  no  BS  +  5  yr. 
of  experience  in  software  develop¬ 
ment. 

Job  Code  SSBA.  Analyze  client  b/z 
proc.,  project  planning,  software 
dev.,  QA  &  team  mgmt.  Conduct 
reqs.  and  system  analysis,  review 
b/z  sols.,  and  end  user  needs. 
System  arch.  &  database  dsgn., 
deploy  and  dev.  software  on 
Microsoft  tech,  like  ASP.net  and 
C#,  Active  Server  pages,  VB.NET/ 
Visual  Basic  6.0,  VBScript,  Java¬ 
Script,  Microsoft  Transaction  Ser¬ 
ver,  SQL  Server  2000,  COM/ 
COM+,  DCOM/MS. NET  Remoting, 
XML/XSL,  Rational  Rose,  data 
modeler  like  ERWINm,  Windows 
2000/NT  and  Intel  Based  ma¬ 
chines.  Maintain  Ebix  software 
packages:  Ebix-One,  Ebix-ASP, 
Ebix-Exchange,  Ebix-SaleSource, 
Ebix-Mall  and  Elite  BS  in  CS  +  2  yr. 
of  exp.  in  software  field  (Requires  2 
yr.  exp.  with  Ebix  software  pack¬ 
ages)  OR  no  BS  +  4  yr.  of  experi¬ 
ence  in  software  development. 

Competitive  salaries.  Apply  with 
Job  Code  to  EBIX,  5  Concourse 
Parkway,  #  3200,  Atlanta,  GA 
30328  with  proof  of  work  authoriza¬ 
tion. 


Senior  Network  En¬ 
gineer  req’d  for  CT 
telecom  co.  Must  be 
CCIE  and  have  M.S. 
or  equivalent,  4  yrs. 
Practical  experience 
required.  NO  TELE¬ 
PHONE  CALLS 
Please.  Send  Resu¬ 
me  to:  attn.  Jim 
Florwick  Globalcom 
LLC,  P.O.  605, Old 
Greenwich, CT.06870 


Sr  Consultant  (dynaSight/ 
Hyperion  Essbase-Oracle  spe¬ 
cialist)  for  comp  s/ware  dvlpg, 
mktg  &  service  co.  in  Wayne, 
PA.  Duties  incl.:  dsgng  &  dvlpg 
web-based  Business  Intellig¬ 
ence  (Bl)  applies  &  providing 
related  implmtn  svees. 

Extensive  travel  required.  Reqs: 
Master's  or  equiv  in  Bus/Info 
Systms  or  related  field.  5yr  exp 
in  job  offd  or  5yr  exp  in  translat¬ 
ing  bus.  info  reqmts  into  report¬ 
ing  or  Bl  solutions.  Applicants 
must  have  significant  Oracle  & 
Hyperion  Essbase  implmtn  exp. 
Respond  to:  Michael  Dieterle, 
Director  of  Professional 
Services,  arcplan  Inc.,  900  West 
Valley  Road,  Suite  204,  Wayne, 
PA  19087. 


Boehringer  Ingelheim  Pharma¬ 
ceuticals,  Inc.  has  an  immediate 
opening  in  its  Ridgefield, 
Connecticut  facility  for  the  posi¬ 
tion  of  Lead  Business  Analyst. 

Provide  business  knowledge  and 
technical  leadership  in  identifying 
projects,  conducting  feasibility 
studies,  evaluating  system  de¬ 
sign  and  determining  cost/benefit 
and  economic  justification  on  all 
IT  projects  to  address  the  sys¬ 
tems  and  technology  needs  of  the 
assigned  business  area. 

Must  possess  a  Bachelor’s 
degree  or  its  equivalent  in 
Business  Administration,  Compu¬ 
ter  Science,  Information  Systems 
or  a  related  field  and  relevant 
experience  with  SAP-Business 
Analysis  skills  in  SD  and  HR 
modules,  the  development  of 
custom  database  programs  using 
Oracle,  Visual  Basic  and  SQL- 
based  RDBMS,  automated  tools 
to  automate  SAP  test  script  spec¬ 
ifications  and  Software  Project 
Implementation  and  Analysis. 

Resume  and/or  cover  letter  must 
reflect  each  requirement  above 
and  specify  reference  code  AD- 
GCD/GC0103  or  it  will  be  reject¬ 
ed. 

Forward  resume  to:  Bl  Staffing 
Center,  PO  Box  534,  Waltham, 
MA  02454.  Fax  number  (781) 
663-2431. 

Email:  BIPI@BI-careers.com 


I71ET2S 

NET2S  is  a  leading  International 
Consulting  and  Engineering  firm 
specializing  in  communications 
technologies.  We  are  presently 
seeking  to  fill  the  following  posi¬ 
tions: 

e  Sr.  Tibco  (RV,  Integration  Mgr) 
Developer 

•  TIBCO/TRIARCH  Systems 
Engineer 

•  Sr.  Security  Systems  Engineer 

All  positions  require  BS/MS  de¬ 
gree  with  a  minimum  of  2  to  3 
years  of  experience  in  the  field. 
Must  possess  excellent  communi¬ 
cation  skills  as  well. 


NET2S,  82  Wall  Street  Suite  400, 
New  York,  NY  10005;  Fax:  (212) 
279-  1960;  Phone  (212)  279-6565; 
or  Email:  iobus-nv@net2s.com 


Programmer  Analyst. 
Experience  w /  C++, 
VB,  Java.  Must  have 
BS  in  CS,  Comp. 
Eng.,  or  EE.  Must 
have  authority  to 
work  in  US.  Send 
cover  letter  and 
resume  to  Jennifer 
c/o  PCS  at  1415  N. 
Dayton,  Chicago,  IL 
60622. 


Prosoft  Technology  Group,  Inc. 
is  a  nationwide  professional 
software-consulting  firm.  We 
offer  competitive  salaries,  full 
benefits  and  a  team  spirited, 
success  driven  environment. 
The  positions  of  Programmer 
Analyst  (ERP)  and  Programmer 
Analyst  (EAI/B2B  Integration) 
require  at  least  two  (2)  years  of 
work  experience.  All  other  posi¬ 
tions  require  at  least  one  (1) 
year  of  experience  in  one  or 
more  of  the  following  skill  sets 
and  also  all  positions  require  at 
least  a  Bachelor’s  degree  in 
Computer  Science  or 
Engineering  (any  field). 
PROGRAMMER  ANALYST 
(ERP): 

SAP  R/3  Functional  Modules, 
ABAP/4  Reporting,  BASIS,  BW 
and  CRM 

Oracle  Applications, 

Peoplesoft,  Siebel 
PROGRAMMER  ANALYST 
(EAI  /  B2B  Integration): 

Web  Methods  (EAI  and  B2B 
Integration).  See  Beyond  and 
Mercator 

PROGRAMMER  ANALYST 

(eSolutions): 

SAP  Portals  (Top  Tier),  Web 
Logic,  Web  Sphere,  iPlanet 
and  J2EE  Technologies 
PROGRAMMER  ANALYST 
(Knowledge  Management): 
Data  Warehousing,  Enterprise 
Reporting,  Actuate,  Cognos, 
Business  Objects  and  Crystal 
Reports 

System  Administrators  and 
DBA: 

Unix  Administrators  (Solaris, 

AIX,  HP-UX,  DEC-Unix,  NT, 
LDAP,  Oracle  DBA  and  SQL 
DBA 

Business  Development 
Manager:  Requires  a  Bache¬ 
lor's  degree  in  Business 
Administration  or  Engineering 
(any  field)  with  at  least  one  (1) 
year  of  experience  in 
Information  Technology. 

ALL  POSITIONS  REQUIRE 
FREQUENT  TRAVEL  AND 
RELOCATION  THROUGHOUT 
THE  U.S.  ONLY  QUALIFIED 
U.S.  WORKERS  NEED  APPLY. 
Please  mail  your  resume  with 
Ref  #  Pete  -  2003  to  Attn:  HR 
Manager,  PROSOFT  TECH¬ 
NOLOGY  GROUP.  INC.,  2001 
Butterfield  Road,  Suite  1050, 
Downers  Grove,  IL  60515 


SOFTWARE  ENGINEERS  (8  posi¬ 
tions):  require  Bachelor’s  in  Engin¬ 
eering/Computer  Science/Mathe¬ 
matics/Science  or  closely  related 
field  with  experience  providing 
skills  in  described  duties,  at 
$65,000  per  year;  Senior  Software 
Engineers  (8  positions)  with  Mas¬ 
ter’s  and  two  years  experience,  at 
$70,000  per  year  Provide  on-site 
consulting  in  design,  analysis  and 
development  of  software  applica¬ 
tions  for  legacy  systems  in  IBM 
mainframe  environment;  develop¬ 
ment  and  administration  in  Oracle, 
DB2,  SQL  Server  and  Sybase;  e- 
commerce  and  web  applications 
development  in  Microsoft,  Java 
and  related  technologies;  network 
management  systems  develop¬ 
ment  with  Netscape  Server  and 
related  tools;  SAP  R/3  applications 
on  Windows  with  DOS  and 
ABAP/4  and  related  modules.  40% 
travel  to  client  sites  in  the  United 
States.  Mail  resumes  to  YASH 
Technologies,  Inc.,  Human  Re¬ 
sources,  605  17th  Avenue.  Suite  1, 
East  Moline,  IL  61244 


Software  Developer 
Full-time  position  in  Wheaton, 
IL.  In  this  position  you  will  deliv¬ 
er  quality  code  in  a  collaborative 
environment,  as  well  as  docu¬ 
ment  and  communicate  techni¬ 
cal  and  architecture  information 
as  needed.  Required:  Master’s 
degree  in  Engineering,  Computer 
Science  or  related  field;  1+  year 
of  experience  in  developing  N- 
tier  DNA  application  using  ASP, 
VB.COM,  DCOM,  SQL,  server, 
javascript,  remote  scripting;  6+ 
months  experience  in  develop¬ 
ing  in  Web  Farm  Environment; 
and  6+  months  of  development 
experience  in  ASP.net,  VB.net, 
XML,  XSL  and  Xpath.  Contact 
miwinski@warrantycheck.com. 


Remedy  Applications 
Engineer  /  System 
Administrator  req'd 
for  CT  telecom  co. 
Must  have  M.S.  or 
equiv’t  +  3  yrs.  exp. 
NO  TELEPHONE 
CALLS  Please.  Send 
Resume  to:  attn.  Jim 
Florwick  Globalcom 
LLC,  P.O.  605, Old 
Greenwich, CT.06870 


Optimum  Technologies  seeks 
Software  Engineers  to  design  & 
develop  complex  s/ware  applns 
using  UNIX,  Windows,  C++. 
VC++,  VB,  PL/SQL.  Unix 
Scripting  (sed,  awk,  grep)  Linux 
Scripting,  SS7,  Oracle.  SQL  Svr 
&  related  tools.  MS  or  eqvlnt  in 
Comp  Sci,  Engineering,  Busin¬ 
ess  or  a  closely  related  field  & 
min  one  yr  exp  req'd.  Job  in 
Woodridge,  IL  &  other  locations. 
Apply  to  HR,  Optimum  Tech, 
1230  Golfview  Dr.,  Woodridge, 
IL  60517.  Fax:  630  985  7825. 
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Computers-Staff  Leads  needed. 
Seeking  qual.  candidates  pos¬ 
sessing  MS  or  equiv.  and/or  rel. 
work  exp.  Part  of  the  required  rel. 
exp.  must  include  6  months  work¬ 
ing  with  PeopleSoft  ERP,  Oracle 
&  DB2.  Duties  include:  Design, 
develop  &  implement  business 
solutions  &  applications;  Create 
system  conversions  of  legacy 
mainframe  systems  to  PeopleSoft 
systems;  Mentor  junior  tech,  con¬ 
sultants.  Must  be  willing  to  travel 
extensively  &  relocate  as  req'd. 
Exp.  in  SQR,  SQL  with  UNIX  & 
Windows  platform  preferred. 
Fwd.  resume  &  ref.  to:  Cedar, 
Inc.,  Attn;  HR,  25  Burlington  Mall 
Rd.,  4th  Floor,  Burlington,  MA 
01803. 


PROGRAMMER-ANALYSTS 
needed  at  client  sites  to  dsgn 
&  dvlp  interfaces  &  prgm 
modules  using  Sybase,  Java, 
ESQL/CPP,  Perl,  Unix,  Open 
client  library  &  T-SQL;  Write  & 
sched  jobs  thru  Autosys  & 
Control-M;  Access  data  thru 
DB-Artisan;  Synchronize 
d/bases  using  Sybase  replica¬ 
tion  server.  Send  resume  to 
Global  Consultants,  601 
Jefferson  Rd,  Parsippany,  NJ 
07054. 


Software  Engineer 
Mohegan  Lake,  NY.  Req¬ 
uire  experience  in  design¬ 
ing  &developing  commer¬ 
cial  applications  using  Java, 
XML,  Developer,  Oracle, 
Data  Warehousing  & 
Oracle  Applications.  Relo¬ 
cation  within  USA  possible. 
Attractive  compensation 
package.  Send  resume  to 
Siva,  Globytes  Technology 
Solutions  Lie.,  691 
Panorama  Drive,  Mohegan 
Lake,  NY  10547 


Supermarket  Retail  Bsns  seek¬ 
ing:  Software  Engineer  w/MS 
Degree  &  1  year  exp.  to:  analyze 
business  needs  for  users  in  the 
dept,  of  consumer  goods. 
Custom  Des.  &  maintain  system 
using  Business  Basic,  FoxPro, 
VB  5,  SQL  Svr,  FRX,  Crystal 
Reports  &  Win  NT  on  mainframe 
(Unisys  A  series)  to  consolidate 
data  for  reporting.  Travel  abroad 
&  within  US  to  gather  user  req., 
specifications  &  for  Imp.  of  soft¬ 
ware.  Exp.  in  retail  busn.  is 
must.  Resume  to:  Attn:  Don 
Winant,  MIS-8810,  Gristede's 
Foods,  Inc.,  823  11th  Ave,  NY, 
NY  10019. 


Logos,  a  Bible  Software 
Company,  seeks  S/w  Dsgn. 
Analyst  for  HQ  office  in 
Bellingham,  WA.  DESC:  Dsgn  & 
dev.  multilingual  info,  retrieval 
sys.  for  use  In  computer  refer¬ 
ence  works  util.  C++,  ATL,  COM, 
HTML,  JScript,  &  XML  on  Win. 
Dev.  implementations  of  into, 
retrieval  approaches  including 
auto  summarization,  term  con¬ 
flation,  doc.  clustering,  cross 
lang.  searching,  &  topic  extrac¬ 
tion.  REQS:  BS  in  Engr,  CS, 
Math,  or  Physics  +  6  mos.  exp. 
coding  progs.  &  apps.  in  C++  for 
Win.  Prem.  sal.  +  benes.  Pis. 
reply  to  E.  de  Kock,  Job#  LR- 
101,  1313  Commercial  St, 

Bellingham,  WA  98225. 


Computer  Programmer,  Plan, 
develop,  test,  and  document 
programs.  Evaluate  user 
requests  for  new  and  modified 
programs  for  business  applica¬ 
tions  using  Visual  Basic  6.0, 
Microsoft  SQL  Server,  Windows 
2000/NT,  and  software  automa¬ 
tion  for  large  retail  supply  chain 
managment.  Swansea,  SC  loca¬ 
tion.  40  hrs/wk,  9AM-5PM. 
Competitive  Salary.  Send 
resume  to:  Primetech  Systems, 
Inc.,  1010  Green  Tree  Rd., 
Pittsburg,  PA  15220. 


Infobahn  Technologies 
delivers  innovative  IT 
Solutions  to  business 
clients  nationwide.  We 
have  immediate  full  time 
oppurtunities  for  Software 
Engineers.  All  applicants 
must  have  a  minimum  BS  in 
Comp.Sci.Engg.  or  related 
field  plus  2  years  of  experi¬ 
ence.  Send  resume  to: 
Infobahn  Technologies, 
(HR)  288  Walnut  St.  #410, 
Newton  MA  02460. 


Senior  Software  Engineer 
responsible  for  research, 
design  and  developing  com¬ 
puter  software  systems.  Will 
conceptualize,  design  and 
construct  a  framework  for 
business  application  soft¬ 
ware.  Will  use  various  plat¬ 
forms  including  COBRA/J2EE 
and  C++,  Java  and  object  ori¬ 
ented  design.  Must  have  5  yrs 
of  exp.  in  job  offered.  Salary 
Competitive.  Send  resumes 
to:  Kate  Elliott,  Mentisys, 
lnc.1545  Peachtree  St..  Ste. 
340  Atlanta,  GA  30309. 


Sr.  Database  Admin.  Design, 
analyze,  test,  maintain  &  im¬ 
prove  logical  &  physical  data¬ 
bases.  Responsible  for  backup, 
recovery  &  tuning  of  databases. 
Calculate  optimum  values  for 
database  parameters  &  system 
analysis.  Use  Oracle,  SQL  serv¬ 
er,  &/or  related  skills.  Req  4  yrs 
exp  in  job/4  yrs  exp  as  Systems 
Analyst  &  Consultant  or  Asst. 
Syst.  Anal.  Or  Sr.  Programmer  & 
Programmer.  Jobsite:  West 
Greenwich,  Rhode  Island.  Send 
ad  &  resume:  Yen  C.  Chong, 
Amgen  Inc.,  One  Amgen  Center 
Dr.,  Thousand  Oaks,  CA  91320- 
1799.  Include  Ad#  02-412FV. 


Database  Analyst 
sought  by  Telecom 
Network  Solutions 
co.  Bach  in  Comp 
Sci/Eng  or  related 
field  w/3  yrs  exp. 
Respond  by  resume 
to  HR  Dept, 
Amplidyne,  Inc,  5475 
Peoria  St,  Bldg  1 ,  Ste 
J,  Denver,  CO  80239. 


The  World  Of  Work  Is 
Changing  Every  Week. 


Luckily, 


For  the  most  up  to  date  opportunities 
coverage,  stay  tuned  in  with  us. 


where  the 


host  get  heller 

1-800-762-2977 
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Helping  You 
Get  One. 


careers.com 


OH  Data/Telecom  Service  Co. 
seeks  Programmer-analyst  I  to 
assist  in  plan/develop/test/docu¬ 
ment  of  computer  programs; 
apply  knowledge  of  program. 
Techniques  and  computer  sys¬ 
tems;  assist  in  eval  user  re¬ 
quests  for  new/modified  pro¬ 
grams;  consult  w/users  to  identi¬ 
fy  current  operating  procedures; 
clarify  program  objectives;  enter 
program  codes  into  computer 
system;  assist  in  analyzing, 
reviewing,  altering  program  to 
increase  operating  efficiency. 
Bachelor’s  in  Comp  Sci/Civ 
Engin  or  equiv  and  3  mos  in 
job/job  related  exp  req.,  includ¬ 
ing  exp  w/UNIX  programming, 
C++,  Perl,  Java,  SQL  (PgSQL). 
Resumes  (no  calls)  to  Boadvox 
LTS,  1228  Euclid  Ave.  Ste.  390 
Cleveland,  OH  44113.  EOE. 


Applisoft,  Inc.,  is  hiring  Pro¬ 
grammers/Analysts,  Software 
Engineers,  System  Administra¬ 
tors,  Functional  Application 
Consultants  and  Market 
Research  Analysts.  May  be 
assigned  to  client  sites  nation¬ 
wide.  Send  resumes  to 
Applisoft,  Inc.,  12280  Saratoga- 
Sunnyvale  Road,  Suite  #  105, 
Saratoga  CA  95070  or  email 
applisft@ix.netcom.com. 


TO 

HIRE? 


BM 

ft 

1 

US! 

i 

ITcareers  and 
ITcareers.com 
reach  more  than 
2/3  of  all  US  IT 
workers  every 
week.  If  you 
need  to  hire  top 
talent,  start  by 
hiring  us. 

Call  your 
ITcareers  Sales 
Representative  or 
Nancy  Percival  at 
1-800-762-2977. 

ITcareers 

where  the  best 
get  better 

iTlcareers.com 


Web  Applications  Developer  to 
architect,  design,  develop,  test, 
implement  and  debug  interactive 
web  sites  and  web  applications  for 
e-commerce  clients,  utilizing  full 
range  of  web  development  skills 
(including  XML,  XSLT,  CGI),  busi¬ 
ness  layer  skills  (including  COM 
and  CORBA)  and  back  end  office 
systems  (including  DB2,  AS400 
and  MySQL).  Requires  Masters  or 
equivalent  level  degree  in  Com¬ 
puter  Science,  Math,  Physics, 
Engineering,  Chemistry  (Math 
Based)  or  closely  related  field  and 
2  years  of  experience  in  business 
to  business  software  development. 
Qualified  applicants  must  be  eligi¬ 
ble  for  permanent  employment  in 
the  United  States.  Send  resumes 
to:  Ms.  Carol  Stano,  Controller, 
Drone  &  Mueller  and  Associates, 
12977  N.  Forty  Drive,  Suite  100, 
St.  Louis,  Missouri  63141 


JUNIOR  PROGRAMMER/ANA¬ 
LYST  to  analyze,  design,  develop 
and  maintain  enterprise  application 
software  systems  in  a  client/server 
environment  using  PowerBuilder, 
C++,  Visual  C++,  SQL,  PL/SQL, 
Java,  SQL  Server,  Oracle  and 
Sybase  under  Windows  and  UNIX/ 
SCO  operating  systems;  Perform 
duties  under  close  supervision  of 
project  director  to  ensure  accuracy 
and  that  project  progresses  accord¬ 
ing  to  prescribed  instructions  and 
expected  results  are  met.  Require: 
8.S.  degree  in  Computer  Science, 
an  Engineering  discipline,  or  a 
closely  related  field  with  one  year 
of  experience  in  the  job  offered  or 
as  a  Programmer.  Extensive  travel 
on  assignment  to  various  client 
sites  within  the  U.S.  is  required. 
Competitive  salary  offered.  Apply 
by  resume  to:  Shri  Gangal, 
President,  Syspro  Technologies, 
Inc.,  3091  Holcomb  Bridge  Rd., 
Suite  H-2,  Norcross,  GA  30071; 
Attn:  Job  KS. 


PROGRAMMER/ANALYST  to 
analyze  user  requirements,  and 
design  and  develop  manufac¬ 
turing  applications  using  Visual 
FoxPro,  Clipper  and  Visual 
Basic  under  Windows  and  UNIX 
operating  systems.  Require: 
B.S.  degree  in  Computer  Sci¬ 
ence/Engineering,  or  a  closely 
related  field  with  two  years  of 
experience  in  the  job  offered  or 
as  a  Systems/Analyst.  Compet¬ 
itive  salary  offered.  Apply  by 
resume  to:  Kyle  Williams, 
Concord  Business  System, 
1701  Barret  Lakes  Blvd., 
Kennesaw,  GA  30144;  Attn:  Job 
SP. 


Pro  Softnet  Corporation 
has  multiple  openings  at 
its  Woodland  Hills  office, 
and  unanticipated  client 
sites  throughout  the  U.S 
for  the  following  postions: 
Software  Engineers,  Pro¬ 
grammer  Analyst,  Busi¬ 
ness  Manager,  Manage¬ 
ment  Analyst.  Mail 
resumes  to  :  Pro  Softnet 
Corp.  21300  Vicory  Blvd. 
#  1230  Woodland  Hills, 
CA  913007  Attn  R. 
Kulkarni  Code  PI 01. 


Computers -Programmer 
Analysts  needed.  Seeking 
qual.  candidates  possessing 
BS  or  equiv.  and/or  rel.  work 
exp.  Part  of  the  required  rel. 
exp.  must  include  1  yr.  work¬ 
ing  with  Visual  Basic,  MS 
SQL  Server  &  Unix  (AIX)  and 
6  months  working  with  People 
Tools.  Work  with  3  of  the  fol¬ 
lowing:  MS  SQL  Server, 
Visual  Basic,  Unix  (AIX), 
Windows  NT,  Oracle  &  People 
Tools.  Fwd.  resume  &  ref.  to 
Percipia,  Inc.,  Attn:  HR,  816 
Morrison  Rd.,  Gahanna,  OH 
43230. 


NEWS  MEDIA  MANAGER  -  WABC 
Eyewitness  News  has  an  immedi¬ 
ate  opening  for  a  News  Media 
Manager.  Responsibilities  include: 
managing  media  ingest,  output  and 
traffic  flow  for  multiple  newscasts 
including  digital  playback,  supervis¬ 
ing  news  editors,  news  editing,  and 
managing  digital  servers  and 
archives. 

The  successful  candidate  will  have 
a  minimum  of  3  years  television 
news  editing  experience,  and  multi¬ 
ple  years  experience  working  in  a 
TV  newsroom  exercising  editorial 
judgment.  Must  be  proficient  in 
non-linear  editing  techniques,  com¬ 
puter  literate,  comfortable  working 
with  Microsoft  Office  and  Windows 
NT,  as  well  as  experience  with  one 
or  more  newsroom  systems  such 
as  AP  ENPS. 

This  individual  must  be  highly  orga¬ 
nized  and  used  to  working  under 
tight  deadlines  while  working  on 
multiple,  overlapping  projects.  The 
News  Media  Manager  will  work 
closely  with  News  Producers  and 
Management  to  ensure  the  timely 
and  accurate  production  of  news¬ 
casts,  special  reports  and  special 
segments.  Prior  supervisory  experi¬ 
ence  preferred. 

Please  send  resume  to:  Ted 
Holtzclaw,  News  Operations 
Manager,  WABC-TV,  7  Lincoln 
Square  4th  FI.,  New  York.  NY 
10023.  No  calls  please.  We  are  an 
Equal  Opportunity  Employer. 


SOFTWARE  ENGINEER  to 
design,  develop,  implement  and 
maintain  web-based  application 
software  and  enterprise  wide 
daiabases/reports  using  Visual 
Basic,  ASP,  SQL  Server,  Oracle 
Developer,  Oracle  Designer, 
Oracle  Discoverer  Tools,  Active 
Reports  and  Oracle  Reports 
under  Windows  and  UNIX  oper¬ 
ating  systems;  Mentor  junior 
programmers  and  engineers. 
Require:  B.S.  degree  in 

Computer  Science,  an  Engin¬ 
eering  discipline,  or  a  closely 
related  field  with  four  years  of 
experience  in  the  job  offered  or 
as  a  Programmer/  Analyst. 
Extensive  travel  on  assignment 
to  various  client  sites  within  the 
U.S.  is  required.  Competitive 
salary  offered.  Apply  by  resume 
to:  Vishy  Dasari,  President, 
Objecthet  Technologies,  Inc., 
1117  Perimeter  Center  West, 
#E-104,  Atlanta,  GA  30338; 
Attn:  Job  CB. 


Eclipsys  Corporation,  a  global 
healthcare  information  technolo¬ 
gy  and  services  company,  seeks 
a  qualified  applicant  for  the  posi¬ 
tion  of  VP  -  Sales  Executive  for  its 
Malvern.  PA  location.  Position 
requires  a  minimum  of  a  Bach¬ 
elor’s  degree  in  Marketing, 
Business  Admin.,  or  Healthcare 
Admin,  or  equivalent,  plus  2  yrs 
exp  in  sales  or  marketing  in  a 
healthcare  environment.  To  apply, 
visit  our  web  site  at: 
www.eclipsys.com 

ECLIPSYS 

The  Outcomes  Company 
Equal  Oppty  Employer  M/F/D/V 


Information  Systems  Mana¬ 
ger  needed.  Seeking  qualified 
candidates  possessing  MS/ 
BS  or  equiv.  and/or  rel.  work 
exp.  Part  of  the  req.  rel.  work 
exp.  must  include  one  year 
working  with  SQL  Server, 
Visual  Basic,  and  Visual 
Interdev.  Duties  include:  Plan, 
direct  and  coordinate  all  infor¬ 
mation  systems  projects; 
Assess  hardware  and  soft 
ware  needs  and  provide  tech¬ 
nical  support.  Mail  res.,  ref. 
and  sal.  req.  to  Shelby  County 
Trustee's  Office,  160  N.  Mam 
St.  #300,  Memphis,  TN 
38103. 
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WebLogic  Upgrade 


BEA  Systems’  WebLogic  Platform  8.1  includes: 

WebLogic  Server  8.1  -  Improved  performance,  enhanced  clustering 
and  monitoring,  support  for  Web  services  security  and  reliable  messaging, 
simplified  development  and  ease  of  administration. 

WebLogic  Workshop  8.1  -  Integrated  development  environment  that 
can  be  used  with  all  products  in  the  WebLogic  Platform;  includes  additional 
and  extensible  controls  for  connecting  to  database  and  back-end  re¬ 
sources;  provides  graphical  designer  for  Java  Server  Pages,  portals,  busi¬ 
ness  process  management  and  data  transformation. 

WebLogic  integration  8.1  -  XQuery  language  for  data  access  and  trans¬ 
formation,  XML-based  workflow  language  to  simplify  business  process 
automation,  enhanced  message  broker  and  guaranteed  delivery  services. 

WebLogic  Portal  8.1  -  Support  for  Java  portlet  (JSR 168)  and  content 
repository  (JSR  170)  standards,  content  management  and  search  capabili¬ 
ties,  simplified  integration  of  Web  resources. 

Note:  WebLogic  Server  is  due  for  general  release  in  the  spring.  The  Workshop.  Integration  and 
Portal  products  are  due  in  the  summer. 
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Mass.-based  Giga  Information 
Group  Inc.  Rymer  said  the 
tool’s  initial  version  served  as 
a  proof  of  concept  of  BEA’s 
overall  design  of  an  event- 
based  Java  development  envi¬ 
ronment  similar  in  intent  to 
Microsoft  Corp.’s  Visual  Basic. 
He  predicted  that  the  new  tool 
will  have  a  substantial  effect 
on  developer  productivity. 

Even  in  the  tool’s  early  in¬ 
carnation,  some  companies 
found  benefit.  Richard  Lynn, 
vice  president  of  global  appli¬ 
cations  at  Pfizer  Inc.’s  phar¬ 
maceutical  group,  said  his  di¬ 
vision  was  able  to  set  aggres¬ 
sive  timetables  with  the  out¬ 
sourcers  that  develop  its  ap¬ 
plications,  knowing  that  the 
BEA  tool  gave  them  added 
flexibility  to  make  changes. 

Lynn  said  the  new  tool  will 
provide  more  benefits,  since 
developers  will  no  longer  have 
to  “Alt-Tab”  between  applica¬ 


tions,  and  they  will  be  able  to 
more  easily  reuse  code. 

BEA  is  promoting  its  new 
WebLogic  Platform  as  a  way 
to  converge  integration  and 
custom  application  develop¬ 
ment.  Kapoor  said  the  adop¬ 
tion  of  integration  brokers  has 
been  limited,  but  he  hopes 
WebLogic  Platform  8.1,  with 
its  newly  unified  architecture, 
will  make  integration  more 
mainstream  by  reducing  the 
complexity,  cost  and  time 
needed  for  such  projects. 

So  far,  BEA  has  made  its 
mark  as  an  application  server 
vendor,  vying  with  IBM  for 
the  top  spot  in  market  share. 
But  BEA  has  struggled  for 
recognition  in  the  application 
integration  space. 

Thomas  Murphy,  an  analyst 
at  Stamford,  Conn.-based 
Meta  Group  Inc.,  said  he 
thinks  that  as  developers  be¬ 
come  more  productive  using 
the  new  suite,  the  appeal  of 
BEA’s  integration  products 
will  increase. 

Murphy  said  he  expects 


platform  vendors  such  as  BEA 
and  IBM  to  eventually  provide 
all  of  the  integration  tools  that 
most  companies  need,  pushing 
to  niche  vertical  markets  the 
vendors  that  specialize  in  inte¬ 
gration  brokers. 

Jon  Derome,  an  analyst  at 


The  Yankee  Group  in  Boston, 
said  that  in  the  past  10  months, 
he  has  noticed  that  IBM  and 
BEA  have  been  turning  up 
on  users’  short  lists  for  inte¬ 
gration  projects,  alongside 
integration  broker  vendors 
such  as  webMethods  Inc. 


and  Vitria  Technology  Inc. 

Derome  said  the  combined 
application  server/integration 
broker  offering  can  make  a  lot 
of  sense  for  companies  with 
complex  integration  chal¬ 
lenges  involving  multiple  lega¬ 
cy  or  packaged  applications 
and  Web  applications. 

Just  because  BEA  is  promot¬ 
ing  the  new  products  and  new 
versions  doesn’t  mean  users 
will  be  rushing  to  get  them. 
Bear,  Stearns  &  Co.,  for  in¬ 
stance,  has  major  financial  ap¬ 
plications  running  on  BEA’s 
WebLogic  Server. 

Most  of  the  applications  are 
running  on  Version  5.1,  and 
Bear,  Stearns  is  looking  to 
convert  to  7.0,  said  Sue  Picus, 
managing  director  in  the  ar¬ 
chitecture  office  at  the  New 
York-based  company. 

“We  don’t  just  drop  every¬ 
thing  and  convert,”  said  Picus, 
noting  that  it  costs  money  to 
port  code  to  a  new  version 
and  to  retest  the  complete  sys¬ 
tem.  “We  tend  to  upgrade  only 
when  there’s  a  need.”  I 
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a  lot  of  careful  upfront  analy¬ 
sis  before  adoption. 

“There  is  still  some  confu¬ 
sion.  This  is  still  tricky  for 
some  users,”  said  Marcy  Ne- 
chemias,  an  IBM  pricing  man¬ 
ager.  “But  the  overall  message 
here  is  that  WLC  is  here  to 
stay.”  She  added,  “There  have 
been  some  rumors  that  IBM  is 
going  to  discontinue  WLC. 
Those  are  completely  untrue.” 

Hewitt  Associates  LLC,  a 
human  resources  outsourcer 
in  Lincolnshire,  Ill.,  has  been 
using  WLC  since  November 
2001.  The  company  is  saving 
approximately  25%  in  monthly 
mainframe  software  licensing 
costs,  said  Dan  Kaberon,  He¬ 
witt  Associates’  Parallel  Sys- 
plex  manager. 

“It  was  a  good  deal  on  the 
first  day  of  the  first  month, 
and  it  has  become  easier  to 


implement  and  more  valuable 
for  us  to  exploit  with  every 
change  that  IBM  has  made,” 
Kaberon  said. 

In  many  instances,  compa¬ 
nies  aren’t  moving  to  WLC 
simply  because  they  see  little 
benefit  in  it,  said  Stan  King, 
president  of  Information 
Technology  Co.,  an  IBM  busi¬ 
ness  partner  in  Falls  Church, 
Va.  None  of  the  65  data  cen¬ 
ters  that  are  directly  support¬ 
ed  by  Information  Technology 
has  adopted  WLC,  King  said. 
In  all  65  cases,  mainframes 
and  associated  software  are 
being  used  at  full  throttle  in 
production  environments. 
Such  shops  won’t  see  the  same 
benefits  from  WLC,  which 
favors  users  that  don’t  fully 
max  out  capacities  or  those 
that  have  variable  workloads, 
King  said. 

“There  can  be  tremendous 
saving  in  this  for  those  who 
own  application  development 
shops  or  are  using  mainframes 


on  a  limited  basis  or  have 
brand-new  requirements,” 
King  added. 

Nechemias  said  IBM  will 
work  with  users  to  understand 
specific  concerns  and  address 
them  where  possible. 

For  instance,  in  response  to 
user  demands,  IBM  has  made 
changes  in  the  way  usage  is 
defined  and  measured  under 
WLC.  More  recently,  IBM  dis¬ 
continued  plans  to  develop  a 
license  manager  technology 
that  was  to  have  been  used 
with  z/OS,  after  users  com¬ 
plained  that  it  was  too  intru¬ 
sive  and  complex  to  install. 

In  the  same  vein,  IBM  is 
currently  working  with  users 
to  clarify  issues  related  to  a 
four-hour  rolling  average  met¬ 
ric  IBM  uses  in  some  cases  to 
measure  software  usage,  Ne¬ 
chemias  said. 

“We  are  just  dotting  the  i’s 
and  crossing  the  t’s”  to  clarify 
things  for  users,  Nechemias 
said.  Later  this  year,  IBM  plans 


to  highlight  several  customer 
case  studies  showing  how  ear¬ 
ly  users  who  have  implement¬ 
ed  WLC  are  taking  advantage 
of  it,  she  said. 

IBM’s  move  to  educate 
users  about  WLC  comes  at  a 
time  when  barely  40%  of  all 
z/OS  users  have  adopted  the 
pricing  model,  despite  its  tout¬ 
ed  benefits. 

“In  terms  of  an  adoption 
rate,  one  of  the  gating  factors 
is  that  a  lot  of  users  are  run¬ 
ning  z/OS  in  a  mixed  environ¬ 
ment”  with  OS/390,  said  Mike 
Chuba,  an  analyst  at  Stamford, 
Conn.-based  Gartner  Inc.  That 
makes  WLC  hard  to  imple¬ 
ment,  he  said. 

Another  major  factor  is 
that  WLC’s  benefits  can  vary 
widely  depending  on  the  over¬ 
all  capacity  of  installed  main¬ 
frames  and  the  applications 
that  run  on  them,  so  users 
need  to  do  the  necessary 
analysis  before  making  a 
move,  Chuba  said. 


Still  Committed 


IBM’s  Workload  License 
Charge  allows  users  to: 

a  Pay  for  mainframe  soft¬ 
ware  based  on  workload- 
capacity  requirements. 

x  Upgrade  hardware  with¬ 
out  necessarily  incurring  as¬ 
sociated  increases  in  soft¬ 
ware  fees. 

;  Handle  sudden  workload 
spikes  without  paying  extra 
for  them. 

For  instance,  a  mainframe 
user  with  less  than  1,000  MIES 
installed  is  unlikely  to  see 
much  of  a  price  benefit  and  is 
probably  better  off  with  cur¬ 
rent  Parallel  Sysplex  licensing 
models,  Chuba  said.  On  the 
other  hand,  a  user  with  more 
than  1,000  MIPS  running  mul¬ 
tiple  software  packages  could 
benefit  substantially  by  mov¬ 
ing  to  WLC,  he  said.  I 


Periodical  postage  paid  at  Framingham,  Mass.,  and  other  mailing  offices.  Posted  under  Canadian  International  Publication  agreement  #40063800.  CANADIAN  POSTMASTER:  Please  return  undeliverable  copy  to  PO  Box  1632,  Windsor.  Ontario  N9A  7C9.  Computerworld  (ISSN  0010-4841)  Is  published 
weekly:  except  a  single  combined  Issue  for  the  last  two  weeks  In  December  by  Computerworld,  Inc.,  600  Old  Connecticut  Path,  Box  9171,  Framingham.  Mass.  01701-9171.  Copyright  2003  by  Computerworld  Inc,  All  rights  reserved.  Computerworld  can  be  purchased  on  microfilm  and  microfiche  through  Uni 
verslty  Microfilms  Inc.,  300  N.  Zeeb  Road,  Ann  Arbor,  Mich.  48106.  Computerworld  Is  Indexed.  Back  Issues,  if  available,  may  be  purchased  from  the  circulation  department.  Photocopy  rights:  permission  to  photocopy  for  Internal  or  personal  use  is  granted  by  Computerworld  Inc.  for  libraries  and  other  users 
registered  with  the  Copyright  Clearance  Center  (CCC),  provided  that  the  base  fee  of  $3  per  copy  of  the  article,  plus  50  cents  per  page.  Is  paid  directly  to  Copyright  Clearance  Center.  27  Congress  St.,  Salem.  Mass.  01970  Reprints  (minimum  100  copies)  and 
permission  to  reprint  may  be  purchased  from  Renee  Wywadls.  Computerworld  Reprints,  c/o  Reprint  Management  Services.  Greenfield  Corporate  Center.  1808  Colonial  Village  Lane.  Lancaster.  Pa..  17601.  (717)  399  1900.  Ext  172  Fax  (717)  399  8900  Web 
site:  www.reprintbuyer.com.  E-mail:  reprlnts@computerworld.com.  Requests  for  missing  Issues  will  be  honored  only  If  received  within  60  days  of  issue  date.  Subscription  rates:  $5  pet  copy.  U  S.  -  $190  per  year;  Canada  -  $220  per  y ear.  Central  &  So.  Amen 
ca  $250  per  year;  Europe  -  $295  per  year;  all  other  countries  -  $295  per  year.  Subscriptions  call  toll-free  (888)  559-7327.  POSTMASTER:  Send  Form  3579  (Change  of  Address)  to  Computerworld.  PO  Box  3500.  Northbrook.  III.  60065-3500. 


lputerworld  Inc.  for  libraries  and  other  users 

BPA  ABM  ^ 


50  C0MPUTERW0RLD  March  3, 2003 


THE  BACK  PAGE 


www.computerworid.com 


FRANK  HAYES  ■  FRANKLY  SPEAKING 


Offshore  Face-off 


Nervous  about  offshore  outsourcing?  You 
should  be  —  and  not  just  because  offshoring  has  just 
become  the  favorite  theme  of  the  usual  IT-analyst  sus¬ 
pects.  Last  week  at  Computerworld’ s  Premier  100  con¬ 
ference,  some  panelists  were  throwing  around  cost 
numbers,  like  8  cents  on  the  dollar  for  offshore  IT  work.  Is  that  real¬ 
istic?  No.  Will  it  get  your  CEO’s  attention?  You  bet. 

So  ask  yourself  this:  How  much  of  my  IT  shop’s  work  doesn’t  re¬ 
quire  “face  time”?  That  should  give  you  a  pretty  good  idea  how 
much  of  your  work  might  be  shipped  off  to  Bangalore. 

Along  with  a  pretty  good  idea  of  just  how  obsolete  you’ve  become. 


Not  obsolete  as  in,  “You’re  obsolete  because 
what  you  do  can  be  done  more  cheaply  off¬ 
shore.”  But  as  in,  “You’re  obsolete  because 
what  you  do  doesn’t  meet  the  needs  of  the 
business  any  longer.” 

Does  that  sound  too  simple?  Think  about  it: 
Business  is  about  face  time.  Every  good  execu¬ 
tive,  manager  and  salesman  knows  that.  And 
if  IT’s  top  priority  is  to  align  with  business 
needs,  how  well  we’re  aligned  should  show  up 
in  our  face-time  numbers. 

Besides,  what  a  business  needs  from  its  IT 
shop  today  isn’t  technology.  Technology  is  easy 
to  buy.  Hardware  and  software  vendors  deliver 
it  by  the  truckload.  Sure,  IT  shops  were  once 
in  the  technology-making  game.  We  routinely 
wrote  big  enterprise  applications  and  even  op¬ 
erating  systems.  But  those  days  are  long  gone. 

What  the  business  needs  isn’t  even  the  tech¬ 
nical  smarts  to  get  the  technologies  working 
together.  Specialist  consultants  can  get  an  SAP 
installation  going  faster  than  internal  IT  people 
can,  or  bring  new  multitier  middleware  online 
with  fewer  problems  than  you’d  have  trying  to 
dope  it  out  with  in-house  talent. 

What  the  business  needs  is  the 
ability  to  do  business  better,  faster 
and  more  effectively.  And  what  the 
business  needs  from  IT  is  to  make 
sure  technology  makes  the  business 
better,  faster  and  more  effective. 

So  face  time  is  bound  to  be  a  tell¬ 
tale  marker.  You  can’t  understand  a 
user’s  business  problems  without 
spending  time  watching,  listening, 
asking  questions  and  clarifying  an¬ 
swers.  That  takes  face  time. 

You  can’t  make  certain  that  some 
big,  new  supply  chain  system  will 


actually  make  the  business  more  agile  and  ef¬ 
fective  unless  you  check  out  your  assumptions 
with  warehouse  and  logistics  people  and  sup¬ 
pliers.  You  can’t  be  sure  that  a  CRM  system 
will  help  salespeople  write  more  orders  until 
you  get  a  view  through  the  eyes  of  those  sales¬ 
people.  That’s  face  time  and  more  face  time. 

And  you  can’t  know  how  well  systems  are 
actually  serving  the  business  without  spending 
time  face  to  face  with  the  people  using  them. 

It’s  grim  but  true:  If  corporate  IT  shops  think 
IT  is  all  about  making  technology,  they  can’t 
compete.  Our  huge  homegrown  Cobol  systems 
couldn’t  compete  with  SAP  and  PeopleSoft. 
And  our  teams  of  heads-down,  cubicle-bound 
programmers  working  on  big,  well-specified 
applications  can’t  compete  with  teams  in  India 
and  Russia,  where  discipline  is  higher  and  the 
pay  is  much  lower. 

Anything  we  can  do  isolated  in  our  IT  shop 
cubicles,  they  can  do  in  their  offshore  cubicles 
—  and  almost  always  faster  and  cheaper. 

But  they  can’t  do  face  time.  And  they  can’t 
really  know  our  business  and  put  IT  fully  into 
its  service.  And  those  are  the 
things  the  organizations  we  serve 
need  from  their  IT  shops  today. 

All  that  face  time  and  business 
focus  might  not  be  what  we’d  pre¬ 
fer.  It  may  well  not  be  the  reason 
we  wanted  to  get  into  IT  in  the 
first  place.  It  may  even  scare  some 
IT  people. 

But  that’s  what  we’re  needed  for 
today.  And  offshoring  is  just  anoth¬ 
er  reminder  that  the  business  does 
need  us  —  but  we  have  to  do  what 
the  business  needs. 

Or  face  becoming  obsolete.  I 


frank  hayes,  Computer- 
world's  senior  news  colum¬ 
nist.  has  covered  IT  for  more 
than  20  years.  Contact  him  at 
frank_hayes@computerworld.com. 


See  a  PIN  and  Pick  It  Up . . . 

Hospital’s  new  computerized  transcription  system  re¬ 
quires  a  PIN  for  access,  but  one  older  doctor  can’t 
manage  to  log  in.  “I  didn’t  have  time  for  the  instruction 
class  -  how  do  I  do  this?"  he  asks  help  desk  pilot  fish. 
Fish  walks  him  through  it,  but  doc  complains,  “It  isn't 
taking  my  PIN  number."  Are  you  sure  it’s  the  right 
one?  fish  asks.  “I  have  two.  Visa  and  MasterCard," 
doc  says.  “Neither  one  worked.” 


SHARK 

TANK* 


Them 

Pilot  fish  re¬ 
viewing  backup 
policy  is  sur¬ 
prised  when 
sysadmin  tells  him  his 
group  doesn’t  store 
backups  off-site.  What  if 
there’s  a  disaster?  fish 
asks.  “If  there’s  going  to 
be  a  disaster,  whoever 
lives  the  farthest  away 
takes  the  backup  tapes 
home,”  sysadmin  says. 
But  what  if  it’s  an  unex¬ 
pected  disaster?  fish 
asks.  “Oh,”  sysadmin 
tells  him,  “they’ll  always 
let  us  know  in  advance 
if  there’s  going  to  be  a 
disaster.”  Says  fish,  “! 
didn’t  have  the  guts  to 
ask  who  ‘they’  are.” 

No  Secrets  Here 

Pilot  fish  quits  his  coun¬ 
ty  government  job  but 
still  has  his  e-mail  ac¬ 
count  to  help  during  the 
transition.  Then  he  re¬ 
ceives  a  message  from  a 
new  IT  guy,  asking  ail 
users  with  remote  ac¬ 
cess  for  their  phone 
numbers,  log-ins  and 
passwords,  “i  hoped  aii 
the  users  I  had  repeated¬ 
ly  schooled  in  security 
would  refuse  to  re¬ 
spond,”  says  fish.  But 
one  department  head 
not  only  e-mails  his 
password,  but  also 
clicks  on  “Reply  to  all,” 
fish  says  -  “so  every 
user  in  the  county  got 
the  message.” 


Sure,  That 
Should 
Fix  It 

This  not-for- 
profit  group 

:  has  constant  IT  troubles 
j  and  an  IT  guy  who  keeps 
I  spending  money  without 
j  fixing  the  problems.  So 
j  the  organization's  presi- 
|  dent  sets  up  an  IT  advi- 
j  sory  board  to  come  up 
;  with  a  plan,  says  pilot 
j  fish  on  the  board.  But  in- 
I  house  IT  guy  resists  im- 
j  plementing  the  new  plan 
I  -  so  much  that  he’s 
j  fired.  The  result?  “The 
i  president  hires  back  the 
i  IT  guy  as  a  consultant  at 
j  a  better  rate  to  fix  the 
i  problems  he  didn’t  fix  as 
j  an  employee,”  sighs  fish. 

I  “do  figure.” 

; 
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I  If  at  First . . , 

\  User  ignores  the  require- 
)  ments  listed  on  the  box 
=  of  this  CD  burner  -  after 
j  all,  how  different  can 
I  Windows  98  Second 
!  Edition  be  from  the  regu- 
|  lar  version  of  Windows 
!  98  on  his  laptop?  Now  R 
j  won’t  boot  property,  so 
j  he  tries  using  the  Win- 
i  riows  ME  disk  from  his 
j  daughter’s  PC  to  repair 
|  the  damage.  “Fbrtunate- 
I  ly,  I  was  able  to  undo 
i  most  of  the  mess  he 
j  made,"  says  IT  pilot  fish, 
j  “Then  he  asked,  ‘After 
i  you  reload  everything, 
j  do  you  think  I  can  try  to 
•  hook  up  that  burner 
i  again?’  ” 


nt 


OFEED  THE  SHARK!  Send  your  true  tale  of  IT  life  to 
sharky@computerworld.com.  You  snag  a  snazzy 
Shark  shirt  if  we  use  it.  And  check  out  the  daily  feed,  browse 
the  Sharkives  and  sign  up  tor  Shark  Tank  home  delivery  at 

computerworid.com/sharky. 


Traction  through  Technology 

An  ROI  Roadmap  to  Web  Services, 

Pervasive  Computing,  Security  and  Standards 

CTO  Forum  is  designed  for  those  senior  and  executive-level  technologists  who  are 
leading  their  enterprise  technology  strategy.  InfoWorld  invites  you  to  join  today's  leading 
technology  professionals  and  vendors  in  a  two  and  a  halfday,  invitation-only  event. 
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PLAY 


2]  WIN  WITH  WEBSPHERE:  WebSphere  offers  a  pre-integrated, 
easy-to-implement  portal  solution  complete  with  leading- 
edge  collaboration  from  Lotusf  content  management  from  DB2® 
and  the  best  in  security  capabilities  from  Tivoli® 

3]  MAKE  THE  PLAY:  Visit  ibm.eom/websphere/portalplay 
for  a  free  portal  kit  with  downloadable  demos  and  testimonials. 
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@  business  is  the  game.  Play  to  win7 


1]  WIN  WITH  PORTALS:  Here.  There.  Everywhere.  With  information 
coming  from  infinite  sources,  a  seamlessly  integrated  portal 
is  crucial  for  both  increased  productivity  and  reduced  costs. 


